Updater fail-safes