This is the same cause of failure as the recent Massachusetts gas explosions.  The algorithm relied on a single sensor which failed, causing a feedback loop that took out the whole system.  Safety-critical sensors should not rely on a single sensor, or even multiple sensors that share a common mode of failure.  

As we move to more and more automated systems, we need to build sensor failure checks into the algorithms.