counterpoint: the primary problem wasn't that mcas was hard to turn off well. it was that it was a critical system without any redundancy and therefore failed a

counterpoint: the primary problem wasn't that mcas was hard to turn off well. it was that it was a critical system without any redundancy and therefore failed about 100x too often. if mcas had been based off of 3 sensors like it obviously needed to be it would have failed (and known that it failed so it could turn itself off instead of pitching down the plane) one a decade or so rather than a few times a year.