Earlier quoted context omitted.
Not crash?
It was in manual mode. Should it forcibly take away control from the user that gave it a direct command, because it "thinks" they're not paying attention?
If you add safety measures to manual (possible outcome of GP’s comment) then you’re back at not having a manual safety override.