My take is that users are coming to view upgrades as dangerous because tech companies have made them stupidly dangerous.

Upgrades should never be irreversible. If something breaks, or a feature you rely on is removed, you should be able to downgrade—preferably to a snapshot which was automatically created for precisely this circumstance.