In the case of OCaml, the structural subtyping of object fields can never cause a crash, because it is verified at compile-time.