>   what sort of atomicity guarantees exist for _update handlers.

None.  And they can fail with a 409 revision conflict