On practice you will want some independent protection systems, and fix problems as they appear on each of those. On the real world, what is naive is expecting you did in fact know all the failure modes beforehand.

The entire problem with rockets is that you can't fit many such systems into them. So the accidents happen.