Better type safe access to buffer data

We have iterators, and a operator[] that gives character data, but no type safe way to directly index the buffer data.

Add a templated at() function.

Can we drop the operator[] function?