This reminds me of the “crash-only software” concept — that is, avoid writing a “shutdown” mechanism and instead ensure the system can restart when terminated at any point. The idea being that then your recovery system isn't a rarely-invoked special case, so it is more likely to work when you need it (and it has pressure to be efficient), and also that you don't have the cost of performing the shutdown when you need to.