An ANA 787 had a double engine shutdown on landing in January this year. The engines would not restart and the aircraft had to be towed from the runway. It was suspected to have been caused by a software issue triggered by the manner in which reverse was engaged but was still being investigated last I heard. With FADEC, shouldn't the engines be protected from inappropriate inputs?