The only issue remaining is how to ensure constant connection with the cloud during the important failing/crashing/screwing-up bits.
A live satellite data link would be of some use on non-polar routes, but when things went wrong enough to care about what was being recorded, could that link be assured to still be working?