Is this reasonable thinking?
I'd think that one would want a wal_keep_size to cover the
pending updates while the standby server might be unavailable,
however long one might anticipate that would be.
In my case, I get a complete replacement (in the form of "|"-
delimited ASCII files) of one of the SCHEMAs every Sunday. The size
of that ASCII data is about 2GB, so I'm thinking of doubling that to
4GB (256 WAL files) to protect me in the case of the standby being
unavailable during the update. Note that a complete loss of both
servers is not catastrophic (I have backups); it would just be
annoying.