I’m way more often than not on the side of refactoring but there’s risks on both ends with a mission-critical service like this. Neither side is zero risk, the choice is about which option will result in fewer and less severe outages.