Yes. Every system is evaluated from a safety perspective and measures are taken. What's interesting is that N+1 redundancy is seldom used. Usualy there is a tot

Yes. Every system is evaluated from a safety perspective and measures are taken. What's interesting is that N+1 redundancy is seldom used. Usualy there is a totaly different system that checks the main system. Like a software watchdog that checks a hardware one. This is also why they need 5 years to get out a model that is more or less the previous model. That and they really don't get software.