TendrilSink::ReadFrom should only use uninitialized bytes for Files

The code:

            // FIXME: this exposes uninitialized bytes to a generic R type
            // this is fine for R=File which never reads these bytes,
            // but user-defined types might.
            // The standard library pushes zeros to `Vec<u8>` for that reason.
            unsafe {
                tendril.push_uninitialized(BUFFER_SIZE);
            }```
See also servo/tendril#4.

This seems icky, no? Couldn't one fix this with different code paths for R=File and any other R=io::Read?

Start at the TendrilSink::ReadFrom implementation containing the shown push_uninitialized call, then read servo/tendril#4 for the related concern. Confirm how File differs from other io::Read implementations; done means user-defined readers cannot observe uninitialized bytes while the existing File behavior remains valid.