[blint_carton]

Yup exactly this. Unfortunately I learned many years ago when switching from web development to mobile development - I can never depend on a "rollback" of front end code. Apple has "emergency policies" too, but I can't remember a time it actually came in handy.

Everything we could think of we added a toggle for. If we weren't sure, it got a toggle - just in case.

Also did most of our final testing against "production" builds because that is the exact binary that customers would end up getting.