Except that didn’t happen with the Max. The engineers thought MCAS was safe. Nobody in management told the engineers to design MCAS do be dependent on a single sensor with no sanity check and nearly physically impossible to override.