The designer of the type must manually ensure exhaustive checking but then consumers will be forced to do exhaustive matching.

It's not that bad in practice.