@feld @marcan @javierg What about the life support system I’m building that is not memory safe.

It’s a matter of handling gracefully yes. That’s all it truly is. Whatever that condition may be. It’s the job of the developer to ensure this is robust enough.