@iatendril@snug.moe @lanodan @chjara A safe crash is fine if you architectured your software properly to be resilient in the face of disruption.
Since you can never guarantee the powergrid isn't shit wherever your users are (among other possible sources of disruption), you should always ensure persistent IO for instance is transactional.