As a software engineer it's hard to trust code that you know has flaws, because there could be a flaw that causes autopilot to automatically turn on. Extremely

As a software engineer it's hard to trust code that you know has flaws, because there could be a flaw that causes autopilot to automatically turn on. Extremely unlikely, I know, but it's definitely a nagging thought. It would be nicer if there were a mechanical cutoff (not really possible in this case) so you could be absolutely sure. I know, I know -- you can design software so that this type of flaw is completely impossible, but as a user I have no way of verifying this, and my trust has already been eroded by the feature I'm trying to disable so I really want to verify it.