[paxys]

Of course this is true, and isn't really a surprise. Very few outages are caused by existing code in a system that was otherwise working perfectly. It's almost always due to some change – whether a bug in newly deployed code, bad config update or whatever else. An untouched system is absolutely more stable than one in flux.

Of course the solution can't really be "let's not deploy anything, just to be safe", because then your competitors are going to launch new features and leave your product behind.