The article alludes to the technique for dealing with failures inside a sealed underwater container: you never actually replace hardware but instead work around

The article alludes to the technique for dealing with failures inside a sealed underwater container: you never actually replace hardware but instead work around failures by reprovisioning services onto different nodes. Over time more and more nodes will fail until the container becomes exhausted and needs replacing. That therefore begs the question: what are the narrowest points of failure in a system like this? For example it would be naive to have 140 fungible compute nodes if they all went through a single networking switch. Node workloads can be moved but a switch failure makes the entire container useless. This works physically as well. Marine vessels have sealed bulkheads such that a hull breach in one end doesn’t cause flooding in the other end. How do these vessels fan out all the other points of failure and what are the error rates in those components?