The better solution seems to be the rather obvious one:
the filesystem should commit data to disk before altering metadata.
Much easier and more reliable to centralize it there, rather than rely (falsely) upon thousands of programs each performing numerous performance-killing fsync's.