Taggart 
Buried in this nicely-detailed RCA is a pretty damning fact:
Cloudflare left .unwrap() in mission-critical Rust code.
For non-Rustaceans, .unwrap() handles a type called Result that can either be Ok with a value, or an Err with an Error. The whole point is to gracefully handle errors and not let panics make it to production code. But unwrap() assumes there's a value to extract without safeguards.
I use .unwrap() sometimes! Usually when there's a logical guarantee that the result can never be an error. But I make sure to purge it from critical processes for exactly this reason.
gunstick