[dredmorbius]

I want to emphasize the point here that the cause of the accident was itself a component of a safety system.

One point that repeatedly gets lost in considerations of risk and security is that more complex systems intended to compensate for other risks will themselves become part of the risk and/or threat profile.

I've both read of this many times in the case of incidents which occur elsewhere, and have seen it firsthand myself where some system or method itself intended to compensate for a risk turns out to be the cause of an incident.

Power backup systems, fire suppression systems, failover / load-balancer devices, and many cases of safety or audit code, just off the top of my head.