I'll accept crashing in preference to a database acknowledging transaction that weren't durably committed.