But I still not understand why ?

In safety-mode, principal do not applied change on datafile until it's write in transaction log of the mirror.

So, if principal crashed, the transaction not written to the mirror will be rollback on the old principal when it will come back.

So the data will not be lost because they will not be applied on old principal.

missing something ?

regards,