Comment by bjackman

Rust only stops you crashing the process in the "oh, I didn't realise this field can be null" case.

It doesn't help with the "yes, in theory it can be null, but in practice it never will be" case. Once you write .expect() you are crashing the service just as badly as a dereference when your assumptions turn out to be wrong.