From the announcement:

When a Safe compartment has already been used, there's no guarantee that it's safe any longer, because there's a way for code executed within the Safe compartment to alter its operation mask.

See the full announcement on use.perl.org.