I don’t know the details of this incident, but the GOV.UK website uses relatively old infrastructure — they’re working to move onto a containerised platform, but still rely heavily on VMs and Puppet.
They could choose to not specify tags and run latest - then a power outage might cause an update by consequence of a fresh pull