Comment by Kinrany

There's a difference between:

- the system compensating for the network being fallible

- the system not fulfilling its design goals

- the system not being specified well enough to test if the design goals were fulfilled