Failsafes are triggered irregularly and are thus prone to bugs. It is also very rare to go back and review data with a separate implementation of the failsafe

Failsafes are triggered irregularly and are thus prone to bugs. It is also very rare to go back and review data with a separate implementation of the failsafe to see if the normal implementation is functioning incorrectly in certain circumstances, so errors in the failsafe algorithm can be difficult to detect until a major problem occurs.