Rust developers leveraging Serde's zero-copy deserialization with &str or &[u8] face hidden runtime traps. Escaped characters in formats like JSON trigger opaque failures since borrowed types can't handle mutation during decoding. This analysis reveals why compile-time safety vanishes and how to safeguard your code.