To paraphrase the Red Arrows' risk register. If command eject is on, and the passenger ejects both inadvertently, then the risk is of injury (not death according to MoD) to both. The 'tolerable and ALARP' mitigation is to have command eject off, so that only the passenger is injured.
But, as admitted at the Inquest last week, it's not ALARP, and I'm sure the Bayliss family don't think it tolerable.
This admission by MoD is, presumably, one reason why the Coroner adjourned. Another might be that a senior officer stated quite categorically that Bayliss should NOT have been in the aircraft.