It's just poor risk management at this point. Making sure that a configuration change doesn't crash the production service shouldn't take more than a few second

It's just poor risk management at this point. Making sure that a configuration change doesn't crash the production service shouldn't take more than a few seconds in a well-engineered system even if you're not doing staged rollout.