[DoctorOW]

> If that’s the case, the old config is already in memory when the new config is being parsed

I think that's explicitly a non-goal. My understanding is that Cloudflare prefers fail safe (blocking legitimate traffic) over fail open (allowing harmful traffic).

[jgilias]

Well, they should then add some reliability goals into the mix too to balance it out a bit.