No matter what, your system will have a variety of failure modes.
Denying the inevitability of failures robs you of your power
to control and contain them. Once you accept that failures will
happen, you have the ability to design your system's reaction