> Why would you even make this software accessible from the ground? Why do you assume that the requirements for the software will be set by safety-minded engin

> Why would you even make this software accessible from the ground? Why do you assume that the requirements for the software will be set by safety-minded engineers, rather than by politicians? I can also think of attack vectors even with your constraints. Tell all planes in a region to fly to a particular airport. Each plane individually calculates that it has enough fuel, so does so. But this doesn't account for the overloaded airport. Even with fuel contingency to fly to a nearby backup airport, I'm sure there's a number beyond which this will not be possible (since all available backup airports would get overloaded too, etc).