At least given the append-only nature, the data loss should be bounded. For some reason, many databases that overwrite data support disabling journaling and/or

At least given the append-only nature, the data loss should be bounded. For some reason, many databases that overwrite data support disabling journaling and/or fsync. E.g. SQLite has "pragma journal = off". You can lose the entire database from an ill-timed crash, if one important page gets written but another doesn't. To their credit, it's not the default, and the documentation is explicit about this: > If the application crashes in the middle of a transaction when the OFF journaling mode is set, then the database file will very likely go corrupt. https://www.sqlite.org/pragma.html#pragma_journal_mode https://www.sqlite.org/pragma.html#pragma_journal_mode