Currently the components in the bootloader stack (shim, grub2, etc) are update to the latest version but there's no logic to rollback to the previous version if there is a regression in the boot path.

It would be useful to have some sort of A/B update mechanism to allow rolling back to the previous known version if there is any issue that would prevent booting the system.