> Pattern 2: Trusting user-provided implementations to be correct

reminds me of the tales from https://oxide.computer/blog/iddqd-unsafe