> Make sure your drivers can handle NAKs and errors on the line. Make sure you can reset subsystems (probably by power-cycling) completely and your system can keep running. Be ready to deal with stale sensor data or having to do a few retries at times.

By the time you've implemented that, you've negated any advantages of I2C. So, why not go directly to SPI?