can't there be a rollout?

That is certainly possible at the cost of some code complexity.

EDIT: Your other points are quite good. I didn't notice them at first, but thank you for writing those. I would encourage others to consider them as well.