Why is a round-trip conversion via a string not safe for a double?