open + write + rename is not crash-safe without fsync unless you are able to make assumptions about the file system or validate the checksum of the file