Safeware,
Thats a good point. However, If you accept that a system is deemed robust if it meets BCARs, then we have to accept that BCARs is/was not robust in its requirements. It seems that the MR2 was accepted as airworthy because the manufacturer was able to maintain certification under a modified MR1 design, because BCARs allowed them to do it. So, on that basis, not even the BCARs were able to prevent the flawed system within the MR2.