Clearly something failed catastrophically, but it could well be post-QC

There should be no "post-QC". You do gradual rollout across the fleet, while checking your monitoring to ensure the fleet hasn't gone down.

Non-gradual-rollout updates are an exacerbating factor, but it isn't a root cause.

Don’t mess with Quebec :D