[dotnet00]

A kalman filter wouldn't account for say, the issue that hit the HAKUTO-R lander, where because the reading on the radar altimeter changed too rapidly, the computer assumed it was faulty, or the IM-1 lander, where they initially had a lot of trouble with altitude sensing (in part because they forgot to remove the covers from the laser rangefinders), managed to work around it, and then failed to fully sense and cancel out the lateral velocity, causing it to skid along the surface, snap a leg and tip over.

[contingencies]

The first sounds like bad assumption (hard fault limit).

The second sounds like bad process leading to bad input, at which point it becomes garbage in, garbage out. The workaround was untested and insufficient.

While you are of course correct the filter will not fix these, none of these are the fault of the filter, they are all human process issues that are firmly out of scope.