> Safety-critical functions should be like that, not in downloadable software. And then the concept of self driving, driver assists and other functionality com

> Safety-critical functions should be like that, not in downloadable software. And then the concept of self driving, driver assists and other functionality comes into play and all of the sudden things are way more muddy - due to the extreme complexity of those, it's inevitable that patches and upgrades will be necessary. > Or simple software that Just Works. That's why you're perhaps spot on here - software should be bulletproof, but achieving that goal might need us to simply do less. However that's not what the industry is striving towards, perhaps apart from aerospace engineering, but even there profit margins have invaded as a metric that's optimized towards. It's unfortunate that it's going to cost many people their lives: https://en.wikipedia.org/wiki/Maneuvering_Characteristics_Augmentation_System https://en.wikipedia.org/wiki/Maneuvering_Characteristics_Au...