>But this isn't really "avionics and surface control" more than automatic lane keeping is a critical control system for the car. Even if we suppose that is tru

>But this isn't really "avionics and surface control" more than automatic lane keeping is a critical control system for the car. Even if we suppose that is true and a fair comparison (which I wouldn't), the way failure modes are handled is key. If there is uncertainty about the sensors that control the feature which controls the avionics the system needs to halt. This is like keeping the lane control active when the computer vision algorithm used to detect the lanes is uncertain about where the lane is. Chances are it'll steer you into the next available tree and kill you.