Originally Posted by
FH1100 Pilot
That the engines ran dry with fuel onboard is simply inconceivable.
This is the problem. Absent mechanical failure this situation cannot happen in any number of other vehicles including the absolute simplest and safest.
If we need to turn fuel pumps off there is a feature for that, it's called a circuit breaker.
Operable switches for flight critical components need two positions only: AUTO / ON.
If there's a light to tell you when the pumps run dry there's an Auto feature available right there, and ON is the only sensible override. OFF override would be via the CBs which gives you a good clue you're doing something that's special circumstances only.
Unless you value the lifespan of the fuel pumps over the lifespan of the people inside, what else makes sense?