So why does the FADEC fail to OFF?
Light twin pistons are not my particular area of expertise, but other FADEC systems I have used have, at worst, failed to a fixed power setting. A FADEC that shuts down a serviceable engine in flight sounds to me like an appalling design.