Ship small and often to limit blast radius. Keep the system operable by the smallest competent team. Biggest risk is invisible complexity creeping in.