> I am not really a fan of "embedded" devices that have to be shut down properly.
the problem is the Pi is not an embedded device, per se.
It's running a desktop operating system that has to be shut down properly. This is the main reason SD cards get corrupted - there is an unchecked flow of writes to the SD card. This increases the chance of outstanding unsynchronized writes and SD card burnout.
I've said many times that raspi-config should allow an option for mounting the filesystems read-only, with an overlay ram based filesystem.
You can run openwrt on the pi, and the filesystem is set up this way. I run a pi like this and have never seen a corruption problem.