Maybe a better name for TrustedRawWindowHandle would be something like StableRawWindowHandle or similar, since the guarantee is that the inner handle won't be mutated.

I'm curious here, I've noticed some of the handles like macOS, Windows, Android and iOS use Option<NonNull<c_void>> while Wayland, XCB and Xlib still use *mut c_void. Is this inconsistency intentional or were those specific handles not changed yet to be in line with the other handles.

I think it was an accidental oversight.

However, I also think that it's a bad change in retrospect. Every pointer here can optionally be null, that's just a blanket rule. I think actually using Option<NonNull<c_void>> makes things less ergonomic though. Realistically, we'll probably want to undo that change before the next release.

Merging this partial progress, and the rest will be finished up in #70