How do you capture unknown-unknowns without blanket coverage, all the time?
Answer: with session-based collection with broad triggers (any error, any anomaly).
You're not deciding in advance what to instrument; you're automatically storing only failure events.