[mikeash]

That sounds terrible. This would push toward non-redundant “perfect” designs which are more likely to kill you when they fail. I’d rather have two imperfect engines than one engine with zero known bugs.