The fact that the autopilot will loudly disengage if there is a serious enough control surface failure to cause an upset is more than enough support IMO.