This could be true in avionics where availability and safety are more or less the same. In other applications where there is a fail safe mode like nuclear (stop

This could be true in avionics where availability and safety are more or less the same. In other applications where there is a fail safe mode like nuclear (stop fission) or land transportation (hit the brakes), you do not need that. The statement « any » is too strong.