Huge numbers of recovery failures - even though reset is on Global Clock Net

The modern advice is "use reset only when required" but if already done then reduce fan out by pipelining reset assuming your design accepts it. Modules that wait for signals e.g. at end of chain can have pipelined reset unless they send hand shake signals. In fact if your design gets active well after reset release you can set false path all over.