This is why you phase release of updates to 1% of customers, then 2%, then 5% over a period of hours... while watching the help desk queues. Because testing is never perfect.