But this two hour failure tells me that they have never really tried a hot failover and failback scenario in order to test the resiliency of their site.
Or something happened that didn't happen in the tests. And if they suspected something might be in an inconsistent state, taking some downtime to make sure it comes back up properly clearly is the better option.