no rust programmer would ever return a sentinel string like this.

Are you sure about that? When backwards compatibility comes into the picture people tend to bend over backwards.