Primary-secondary is simple and robust. If I had a dollar for every time I saw split-brain clusters....
---
And to respond sibling comment about "noticeable" downtime....
Primary-secondary failover in <1m is very feasible. And each minute downtime is a mere 0.002% for the month.
Primary-secondary isn't what is hurting your availability.