I am pretty sure this idea could work, and it’s because I’ve already been experimenting with what is essentially a “Steam ...
ShaniOS maintains two separate environments. If an update - or anything - goes wrong with one environment, simply reboot and switch to the other. I am seriously impressed.