Rollback sounds simple until you try it with database migrations and dependent services. The tool should make reverting trivial, not a multi-step procedure requiring three teams. If rollback takes longer than the deploy, something's wrong with your architecture.