It "seems: to me (please correct, or ignore, as appropriate) possible that a single sensor failure could trigger both UAS _and_ (pseudo) THS runaway, more or less at the same time. I write "pseudo" because apparently it does not run continuously ... but will come back doing it later ... perhaps making it even more difficult to identify. If true, it is my impression that there should be explicit dedicated training for that particular failure mode.