[null and void]

Every automated control system I’ve ever built has a safety shut down circuit which functions completely independent of the computer controls. It’s populated with the simplest, most robust, completely mechanical sensors, switches and actuators which positively shut the system down in the event of a hazardous situation or loss of control.

IIRC, it was precisely one of these autonomous breakers that was a root cause of the big NE blackout of 1965...

[thackney]

But this article was imagining ways to damage the actual vessels, piping and the like.

The NE blackout tripped safety systems that prevented damage and allowed restarting by the next day.

Very different than what this tread topic implied. The risk is not that way.

[Jack of all Trades]

Risk can’t be eliminated. Mechanical safeties fail too, but they’re the next best thing to leaving the big switch in the “Off” position.