Of course it is unsafe. If it is activated, correctly or not, it operates covertly without indication or anunciation. It retains no memory of being overridden

Of course it is unsafe. If it is activated, correctly or not, it operates covertly without indication or anunciation. It retains no memory of being overridden by pilot input but will keep pitching down until cut-out of the loop or the aircraft exits what it thinks is the dangerous corner of the envelope. Unfortunately it often lacks the information to make that determination correctly, due to the poorly-designed sensor integration. That sounds like something right out of the 'Catastrophic Failures' books we studied in uni.