A simple question from an engineer, why a designer should put a pilot in such situation, why the designer cannot prevent and design a solid system? And why if he is not able to do so the blame is on the operator? A wrong design is a wrong design, no matter how much you train the operators