You'd prefer an exception? What's the difference?

We deliberately crash on bugs. It's the safest thing to do. We isolate the different sections into completely separate binaries, any one of which can go down without breaking the rest. This is also why we use sqlite3, which means that we need to get to the end of a transaction commitment, otherwise it Didn't Happen.