And if you ever push a service worker with a bug, then you make the browser permanently unable to display the site unless the user knows how to manually remove the service worker. I've seen it happen on Gmail.

Yes it is a pain in the ass, but just for other people who read this, the bug was in the self-update code for the service worker. If you mess up the cache configuration it can make the service worker never look for an updated version of itself.

It is quite subtle thing in a very small part of the service-worker code but it is not like any random update can brick your app.