Exactly — if we want redundancy, we should plan and build it.

That’s why I offered one possible implementation as a hypothesis, not as a law of nature.

If you have a better non-ideal, real-world design in mind, I’d be interested to hear it — it makes the discussion much easier.