I agree but we both have the luxury of hindsight. I think it’s really difficult to always anticipate all failure scenarios in advance. I am saying that as someone who just discovered had a “bug” in his software discovered that caused a buffer overflow because I didn’t anticipate a buffer as small as 32 Kilobytes in a data link that was designed for 32 Megabits per second :)