Thinking about the topic (and before F4U posted the article above), I yesterday considered to post about the topic of AoA vane reliability, as it seems in both fatal crashes (and actually already in flights before the first crash) those were the root cause of the problems. I actually started to calculate a rough failure rate based on the number of planes shipped (393 by 03/19) and an assumed flying time. Then again, that assumed FIT rate would not take service and replacement cycles into cosiderations anyway, so I decided against posting.... The point about that consideration could have been that even "normal" redundancy with a second sensor might not be sufficient if the failure rate is so high. I just picked me up a certificate on automotive(!) functional safety, so I can somewhat relate to this kind of stuff. Then again, I would assume that Boeing and the FAA have done that job beforehand...
