So in other words, redundancy requires subsystems' Pr(failure) to be independent of each other.