Active-passive is simpler to reason about and usually sufficient for data pipelines specifically, as opposed to user-facing request serving. Most pipeline workloads tolerate the failover latency of promoting a passive region during an outage, and it avoids the conflict-resolution complexity of active-active writes to the same datasets.