It is hard (close to impossible) to write a memory-safe code in C++. In ClickHouse, we approach this with continuous fuzzing. When we tried to integrate duckdb

It is hard (close to impossible) to write a memory-safe code in C++. In ClickHouse, we approach this with continuous fuzzing. When we tried to integrate duckdb as one of the storage engines into ClickHouse, our CI system immediately found an uninitialized memory read inside it: https://github.com/duckdb/duckdb/issues/7433 https://github.com/duckdb/duckdb/issues/7433 @wenc, the op might have meant the native storage format of DuckDB, which does not use Parquet.