3 ms·

I wrote another comment, before reading the article that says it better than me: Catastrophe requires multiple failures – single point failures are not enough.