[RealityVoid]

While safety relevant ECU's are not triply redundant, they ARE doubly redundant with error correction memory. So I don't know what Toyota used to do, but, from my experience, nowadays, auto companies take safety relevant applications VERY seriously.

Actually, for the division I used to work for, a lot of the people programming ECU's for cars came from aerospace. They built radars for planes, now they build radars for cars.

Also, the safety of the systems tends to improve with time, as technology matures.

Also, another interesting anecdote, the Flexray communication protocol used more and more in cars these days was first used in planes.