Redundancy and experience!
What it all boils down to is triple redundancy on all levels critical!
Two engines and the last ultimate mode : Gliding!
Which brings me to training and experience, Gimli 767 crew was **** at Imperial gallon to Kg conversion via Lbs BUT excellent at adapting to glider pilots.
Airtransat , slow to realize fuel leak was the main problem,BUT again great glider pilots.
Point: Engine on fire- useless Shut Down
AOA faulty - Shut down.
BTW . The AOA is of no use to me whatsoever on normal ops with a working Pitot Static system!
3 sensors and a auto shutdown system is clearly needed as standard from what I have read the last 5 months.
Just my 2 cents of common cents
Regards
Cpt B