A controller would only shut down the engine after it had terminated its own "reliable engine" message for some period of time (a few seconds), was receiving the "reliable engine" message from the other controller, and had determined that running its own engine was unsafe.
Would you not want altitude and airspeed to also be a function of that equation? It goes to the time you may have to react and/or restart (if possible)