I'd also be interested in this question. From first principles, I'd be comforted by the knowledge that an on-board picocell would be made to fail-safe, so that even if the main functions failed, there would still be a backup that ensured that all the onboard phones remained captured to the picocell and that they didn't suddenly pump up to maximum power.