It's all about reducing the risk. Accidents happen no matter how well you've engineered your maintenance and deployment practices.

Do everything you can to reduce the risk, including building a resilient system, AND not taking a major swath of it offline during a high traffic period.