content: Fascinating perspective.  The intent of 'fail safe' systems is certainly to prevent a catastrophic failure and one would certainly hope that many redundant fail safes would prevent this, but, what if?    Good fail safe system design handles every 'what if', including the simultaneous failure of every other system and sensor.  Otherwise it is not a 'fail safe' design.