John Marino proposed a method for backing up world when upgrading, for those rare but catastrophic cases where the installed programs can’t run.  After some discussion, he committed an automatic backup method, and there’s a ‘restoreworld’ target to take advantage of it.

The kernel already gets renamed to kernel.old as a backup, if I remember correctly.