This "what if this goes wrong" thinking is vital for large scale systems we use DevOps for. (After reading this, if I ever designed a submarine, I'd try to make sure that such spills wouldn't get into the battery.) That said, I bet a large amount of such "thinking" actually happens by investigating what goes wrong after the fact.

The same sometimes goes for exception handling code.