Plus it's not a service you can typically afford to go down. Any emails you miss during that downtime are gone forever

The sending server will retry a few times, so you have at least a few days to bring it back. And if you prefer an additional fail-safe - adding a secondary MX somewhere else which will just store mails until the primary comes back is trivial.