How would you design a Swift system that supports instant rollback of bad releases?

Use feature flags and remote configuration to disable features instantly.

Instant rollback is not code rollback but behavior rollback. Feature flags allow turning off problematic features remotely. This minimizes user impact during incidents.