>>Every time the primary crashes…
>While I agree it’s a limitation, in 14 years I’ve not seen PG crash once
What about machine crashing? With Intel/Linux based commodity hardware, we go with the assumption that machines will fail and indeed they do. For our DB2 and Oracle servers, it is a breeze to re-integrate the failed server.
Anyhow pg_rewind seem to solve that issue.