[iso1631]

Depends on what your goal is -- minimal downtime or minimal blame

A 5 hour outage when headlines say "the internet is broken" may well be preferable to a 5 minute outage related to your far simpler and far more resilient setup