Fail gracefully
You have the best engineers, and the question is not “Will it break?”, because it will eventually, but “When?”. And when it does the only goal is to minimize the impact on customers. Kill switches allow you to purposely disable non-vital parts of your application and offer a degraded service that still runs rather than being completely down.