So in the event of a failed update, what would be the preferable way to handle it then? I think automatically rolling back to a functional state before the update is pretty optimal.