I mostly agree but I think the bar for the software still has to be unusually high when the failure mode is "you are not allowed to enter the country you legally live in"... The human fallback is essential, but it shouldn't become the thing that makes a fundamentally unreliable system acceptable