It isn't hard to have redundant sensors so that you can drive for a bit on less than all of them. If there is a failure you drive to a mechanic and get the senor fixed before there is a second sensor failure.
The odds of a dual sensor failure is low enough to still be substantially better than humans. Assuming of course that the dual sensor failure is dual unrelated failures. That means care in the wiring of power systems, fail safe modes, over design such that failure can't happen, and other engineering tricks.
The odds of a dual sensor failure is low enough to still be substantially better than humans. Assuming of course that the dual sensor failure is dual unrelated failures. That means care in the wiring of power systems, fail safe modes, over design such that failure can't happen, and other engineering tricks.