The same way it made it into production on POSIX?
O_TRUNC is not default: https://man7.org/linux/man-pages/man2/openat.2.html
O_TRUNC is not default: https://man7.org/linux/man-pages/man2/openat.2.html
The thing that hurts all copy-on-write systems is something like SQLite/Postgres/etc that mutates the file here and there; explicitly not overwriting it. chattr +C is the standard convention to opt out of copy-on-write, for those.