Love the cautious rollout. Keeping 16 QPR1 as opt in test builds first is exactly how a hardened OS should ship. For high risk users, a spare Pixel as a lab device is gold.