To be fair, you have these latent single points of failures even in the most resilient distributed systems. Such as S3. The bucket names are globally unique, w

To be fair, you have these latent single points of failures even in the most resilient distributed systems. Such as S3. The bucket names are globally unique, which means that their source of truth is in a single location. (Virginia, IIRC.) Now... a small thought exercise. If I wanted to take down a Cloudflare datacenter and I had access to a few suitably careless remote hands, I'd take out the power supplies to the core routers, and while the external network is out of commission, power down the racks where they have their PXE servers. That should keep anything, within the DC, from being unable to recover on its own.