@safe only allow operation that cannot screw up your memory. @system is the complete language.

@trusted is an explicit qualifie, to allow @safe code to call @system code. It is mandatory, for instance, for @safe code to call the GC (GC code cannot be @safe).

It is up to the develloper to ensure that @trusted code can really be trusted, so it isn't a subset.