Seattle Roulette.
Seattle Times indicates that the AoAsystem is designed for a 1/100 000 failure rate, which I expect means 1 per 1 e10**5 hours.
There are 350 of the Max flying as of now maybe 10 hours a day, ie 35 000 hours a day.
So one MCAS incident due to a bad sensor can be expected every few days. Exactly what we've been seeing so far.
Seatlle Roulette?
Even if the AoA design study had been made for 1 in 10 Million hours, as it should have been for certification, with the full fleet of 5000 of these flying cows, you would have 50 000 hours a day, and several incidents a year, a hull loss could be expected every few years..
Edmund