> But many operations in Rust can panic, from out-of-bounds indexing to calls into user-provided code, and by default a panic unwinds

That's why I think having unwinding in Rust is a mistake. It gives a false sense of safety, but it's very hard to write unwinding-correct code. So, it would be better to handle panics as immediate process termination instead.