Specifically, how do you handle kernel updates/rollback and factory restores? Does the user install a new SD card if the system breaks or do you have recovery partitions that can be booted? I like the idea of the base snap/docker that installs the base system services.