It's not just linked lists. From the article:

> The next step of course is to write your own equivalents of malloc and free to allocate and deallocate objects within the arena.

A logic bug in that "allocator" - which are plain indices and not covered by borrow checking - could 100% stomp memory.