Make pop() fault-tolerant

`pop()` shouldn't break a chain when there's nothing to pop anyway.