We have a number of other places in the stdlib where bytes-in-bytes-out is observed, at various levels of abstraction.  I think this is reasonable.  To answer your direct question, I think tempfile is a convenience-and-do-it-right wrapper around what is really a pretty low level operation (creating a temporary file/directory securely).