@koteisaev If your memory safe driver returns error 9000 from the initialization routine, your system does not BSOD. Instead you get an exclamation point in Device Manager or what have you. That's the whole damn point. Memory safe (and well designed) languages like Rust force you to think about error handling. Yes there is panic, but it is possible to forbid panic by policy/compiler options and truly force all code to use error handling for every possible corner case, and then your code provably cannot BSOD the system (at least not with memory errors, obviously a failure of the storage driver can still lead to a "can't mount filesystem" BSOD but we're not talking about that here).