This is reasonable, but I don’t know how to do this without making TaskGroup Sendable or splitting it into two types.
Yes, very much. Auto-cancellation affects unhandled errors only. If you don’t want your server taken down, handle the error. But if you can’t, the only logical pattern is to exit.