What is the safest way to recover after a bad update?

Restore a known-good backup (files + database). If you keep versioned plugin zips, you can roll back the plugin first, then re-test the workflow.