The bigger issue is not just the upgrade but how brittle the system is. Modern practices like rolling releases or safe fallback modes are standard elsewhere. Critical infrastructure should not be this fragile.