It's a trade-off between availability and correctness. Do you want anything buggy to crash and stay down until the the problem corrected or a supervisor attempt

It's a trade-off between availability and correctness. Do you want anything buggy to crash and stay down until the the problem corrected or a supervisor attempt to run the same buggy code again hoping the bug isn't encountered again? There is no one-size-fits-all answer, but just restarting without reporting and counting the error rate is never a good decision.