I think this is one of the situations were the intuition of non-engineers should simply be ignored. If we go with the numbers from the article, one fatal accide

I think this is one of the situations were the intuition of non-engineers should simply be ignored. If we go with the numbers from the article, one fatal accident per 2 million hours driven, and if we assume that this is in the ballpark of trolley problem situation, then we need for the trolley problem detector something like six-nines reliability so that the false positives are just in the same ball park as the true positives. And make no mistake, false positives means that the automatic car decides to kill the group of children even though it could just drive safely. So the best code is the empty line, it executes reliable and predictable, does not introduce bugs and is really fast.