If a power failure during the upgrade causes some unrecoverable problem that is a serious design failure. The answer isn't "make power failures less likely" instead it's "make the update process robust to power failure". This kind of disconnected hubris--thinking you can just wish reality away--seems unique to software. Why are they allowed to get away with it?