F9 has single-engine-out capability, and it's actually been used. That requires that the failure be contained. BTW engines are often tested on the ground, so t

F9 has single-engine-out capability, and it's actually been used. That requires that the failure be contained. BTW engines are often tested on the ground, so the main extra thing SpaceX learns from landing stages is data from the non-engine components.