For something as critical as auth, I would expect most changes to be rolled out over a few days just to make sure something like this cannot happen to everyone.

For something as critical as auth, I would expect most changes to be rolled out over a few days just to make sure something like this cannot happen to everyone. Ideally a change would be shadowed for a few % of traffic before it was allowed to start rolling out.