Indeed, like all real-time systems you need to think in terms of worst-case time complexity, not amortized complexity.