I also think that it would be a swell idea to detect whether a system has ever crashed with fsync=off, and do something about that, like maybe bleat on every subsequent startup for the lifetime of the cluster.
Yes. Very, very yes.
That would've made my life considerably easier on a few occasions now.
It shouldn't take much more than a new pg_control field and a test during recovery.
Should TODO this, but since that's sometimes where ideas go to die, I'm going to see if I can hack this out soon as well.