Olasek, by 'random' I implied educated rather than random.
You said it would make nonsense of built-in redundancy - true, but when built-in fails then you're on your own.
Holding in a popped CB is one thing, popping CBs is another.
Pretty clearly this accident was outside any foreseen contingency, and while we are considering probabilities, nothing can be ruled out.