I think you'll find that they have more thrusters on the spacecraft that they actually need - they can control attitude even if they lose one or more thrusters.

I think you'll find that they have more thrusters on the spacecraft that they actually need - they can control attitude even if they lose one or more thrusters. So the possibility of the failure of them is already in the design.