> I can only think of bugs in the custom user bridges or bugs in Search - e.g. a silly NPE - not sure we should have infrastructure to catch and ignore those, I'd rather have them reported brutally by bubbling up a runtime exception and killing the transaction.

In a development environment I agree, but in production not really. You might want such bug to not affect your transaction.