The only practical solution is probably sensor redundancy. Of course that doesn't mitigate all of the risks.