Right, but even if individual instances go down, you don't end up with headlines all over the world of half the internet being down. Because half the internet isn't down, the network is self-healing. It temporarily blocks off the problem area, and then when the instance comes back, it resynchronizes and continues as normal.
Services might be temporarily degraded, but not gone entirely.