Agreed, and many architectures are designed to have components "transparently fail" without impact to overall operation. When you have forced failures, feedbac

Agreed, and many architectures are designed to have components "transparently fail" without impact to overall operation. When you have forced failures, feedback/damping is absolutely required. However, (my experience dictates) that most such failures are unplanned and unknowable at the outset, and you can only dampen conditions which are predictable.