@mcc Hadn't thought about it but hey yeah, noone ever talks about nines anymore. I think its because its all about security not availability.
Your service being available for all but 12 seconds a year is nice and all, but when you have an unconfigured proxy or documented backdoor account with unchanged default password `password` and all your users data is tied up in ransomeware, it doesn't seem so important. I'd rather have my backend down for 12 hrs a year to apply security patches thanks.