Earlier quoted context omitted.
Reasoning about control flow is much easier when you have so much less control flow because you just let it crash.
What an insane way to think about programming. A service should never crash in response to a runtime error, or any kind of business logic conditional! Crashes are not normal, they signal critical problems and/or programmer errors. A service that crashes in production is a priority-0 bug that needs to be addressed and fixed immediately. More specifically, if you can't trust that calling a function will always return e…
(Consensus protocols are your most bizarre example because they're one of the definitional things that needs to keep working no matter how hard or fast a non-quorum of members dies.)