> We actually had a recent Cloudflare outage caused by a crash on unwrap() function > Memory safety is not that sacred. In fact, for many applications malfunct

> We actually had a recent Cloudflare outage caused by a crash on unwrap() function > Memory safety is not that sacred. In fact, for many applications malfunctioning is better than crashing — particulary in the embedded world where Rust wants to be present. You cannot get 99.999% reliability with Rust — it crashes all the time. Would you prefer silent UB/memory corruption in Cloudflare case? I don't think most developers would agree with this.