[XorNot]

To be fair OTA updates aren't "low risk" - the trick is that you make your OTA system rock-solid so a failure results in a device you can still OTA too.