> if it fails, the failure is contained
What about the failure mode when the courier doesn't follow your parents instructions and leaves the package on the porch?
Now you have the code to the lockbox of the key to the house sitting on the porch where anyone who approaches can gain access to the house.