> I would never want my whole production web server to go down because some random, infrequently used endpoint had a bug in some edge case.

Then you need an alternative.

And that alternative is...messy. Do you have exceptions? Do you type them? Or do you have explicit return values? Is there syntax sugar? Etc, etc.