Maybe Fedora Atomic (or another atomic) would be a good solution for you. I have an old MacBook Air that needs out-of-tree and closed-source WiFi and webcam drivers, and with Fedora Atomic it won’t update the system if it can’t get them compiled in first. Then, if it did and there was still some issue, I could roll the whole system back to the previous working state all at once.