Why is a Canary deployment considered safer than a full rollout, specifically?

It routes only a small percentage of real production traffic to the new version first, comparing error rates and latency against the stable version before promoting further — catching a regression on a small blast radius instead of discovering it only after 100% of traffic is already on the new version.