Bulk updates without a backup gate are a policy choice, not a feature

Most bulk-update tools fan out and hope. Chaining each account’s updates behind its own backup means a failed backup stops only its own site.