Hmm, so did Boeing do as much testing? And did Boeing do enough to ‘ensure a malfunction would not create a hazardous situation’...?
IMHO as a SLF ---- IF as stated in documents --- a single faulty AOA sensor was allowed to repeatedly autotrim stabilizer even after normal disconnect by push/pull on control column- the answer is obvious ..