Yes, the failure here is a panic, typically a crash (of at least the affected subsystem), not memory corruption. Slotmap avoids this via unsafe + implements it

Yes, the failure here is a panic, typically a crash (of at least the affected subsystem), not memory corruption. Slotmap avoids this via unsafe + implements its own handle system, which is probably the right approach. The borrow checker avoids many other issues in addition to memory safety.