Currently the catalog API exposes functions which return raw pointers and it is up to the caller to ensure they never use a pointer after a yield, as was in the case in SERVER-105873. This situation could become less likely if the API only returned smart pointers. Then this type of mistake would become less severe as it would not crash/UB.