More adaptive does not imply less safe (with formal verification)