Almost every time I see saturating add/multiply used to avoid overflows, it's silently wrong or if it's only accidentally right (just because a big wrong number from saturation is a safer bound than a small wrong number from wrapping).