"what does this do if we lose power" is literally the first thing anyone is supposed to think of from a design standpoint when they have an actuator somewhere.

Part of the problem is that "fail fast" which is fine when someone's email doesn't work for 15 minutes turns into "fail deadly" when you're dealing with a physical thing in the real world.