My biggest concern is that how they missed to test the kernel code to run without a failover mechanism to last known configuration? It's common sense. Their QA never raised this concern for availability?