NixOS manages this, it's entirely possible to use the stable channel for system packages but subscribe to the unstable channel for packages installed per-user.

NixOS manages this, it's entirely possible to use the stable channel for system packages but subscribe to the unstable channel for packages installed per-user. Of course, NixOS also has atomic upgrades and rollback, so there's not much risk just running unstable everywhere