Switch assert to propogating error so it doesn't crash on corrupt data

[prasannavl]

/kind fix

• If the snapshot or node isn't shutdown, it gets caught on an assert instead of a graceful error. This is undesirable for multiple reasons, that logs are incomplete, crashes are often not noticed on stdouts, etc.
• This removes the assert and turns it into an error that's caught by the main thread and shutdown