In even class III (implantable and safety critical meaning the patient is harmed or killed if they fail) medical devices are only required to be single fault tolerant.
Not true. Proof: Boeing 737MAX MCAS system, which relies on only one sensor, and when that sensor ices up, causes the aircraft to fly into the ground, killing many hundreds of people in two separate incidents. This design was fully approved by the FAA.
The deal there was the MCAS system was originally designed such that it was thought to be not safety critical. It relied on another sensor that was also non safety critical in its other uses. But then over time Boeing made changes that made it safety critical, and rather than upgrade the hardware they put some footnotes in the manual and expected pilots to do things to avert disaster, but then they didnt properly train pilots to those changes to their duties.
It was a comedy of errors on many levels.
None of it changes my parent comment.