There's a difference between handling all possible error cases (however unlikely) and handling impossible cases. The moment you hit the latter case you can no

There's a difference between handling all possible error cases (however unlikely) and handling impossible cases. The moment you hit the latter case you can no longer make any assumptions about the state of the device and an abort/assert is an entirely appropriate thing to do.