Step One of most disaster plans is not to create a second emergency.
Or even just a microsecond emergency.
But can't NTP server downtime cause a disaster?
Or even just a microsecond emergency.