Coming from C its a striking missing feature of rust. I still find it unnatural, and most of the code I write is Java, where the "what if" is replaced by allocation of project time for gc tuning.
Rust's "don't think about allocs" when everything you do is dominated by memory ownership is wierd.
Rust eradicates a whole class of memory related issues except "not enough". Panic is not necessarily safe/secure, that proc might be doing something important.
Nofixilla take this approach too much, the assumption that no action is secure, what dies might be your burgler alarm.
Fortunatly Linus prioritises working. I feel like his input will help the rust community.