Comment by leaflets2

Yes definitely, one has to assume that from time to time, bugs will reach the prod servers, no amount of tests and code review can completely prevent that.

Hopefully the kill switch system is reasonably easy to code review and test :-)