Being forced to think about every possible failure state is a sure way to spend a lot of time on not creating value for the end user