They certainly mention safety, but don't seem to suggest that the safety is due to the driver overriding the auto-pilot in emergencies. I do agree with your po

They certainly mention safety, but don't seem to suggest that the safety is due to the driver overriding the auto-pilot in emergencies. I do agree with your point, but they could be making the argument that the danger prevented from when the system is operating nominally will be much greater than the danger caused by the driver handoff in low confidence scenarios.