> That's east to say from an armchair but on an aircraft everything is "safety critical" to some extent and you have to choose what gets redundancy.
In flight entertainment, non-emergency lighting, food prep, &c aren't "safety critical" any more than the TVs in hospital rooms are.
As a layman, I'd've imagined that all avionics and control surface control was redundant. Don't most large planes have redundant hydraulic systems and even a deployable wind turbine to run avionics and hydraulic systems under total power loss scenarios? (And hasn't that turbine been used a few times?)
Yes, weight is always a factor, but that doesn't mean that there aren't already multiple redundant, heavy, systems on aircraft.
What puzzels me is that there are 2 angle of attack sensors, but they're only connected to one of the flight computers each, with the other flight computer being the redundant one. What's more Southwest ordered the optional disagree alert, so there is some way to tie and compare these sensors.
Edit:
> The argument for considering MCAS, a system which is not necessary to fly the plane safely, to be "safety critical" is much weaker.
It controls the control surfaces; I'm not sure how it wouldn't count.