Programming in a stoppage or breakdown can be very costly. A simple example is IH put Murphy switches on some machines ages ago to shut down with loss of oil pressure or overheating. An operator had an emergency shutdown crossing railroad tracks, end of this feature. More recently Boeing found a software error in their 787 that automatically rebooted the computer systems if they had not been rebooted after xxx xxx hours. This could happen in flight resulting in loss of control as it is completely fly by wire. Chances it would go long enough without a reboot (systems are shut down during major maintenance) but the possibility it could happen was an industry shock and required an immediate airworthiness directive.
At Case IH our computer controls had a requirement to be hardened to withstand a nuclear explosion (size and distance I can't remember but were in the spec). At Cat we had to test for electronic emissions and electronic hardening before production.
At both companies any kind of programmed fault forbidden. At Cat especially, company image, very rigid testing, yet we all demanded more from electronics. In the millions of lines of code errors could pop up. Rigorous testing uncovered most but anything built by man can fail. At Cat I had access to dozens of years of repair data. If we didn't improve reliability with each generation the people replacing us would. When I retired one of the machines for which I was responsible had the second best reliability in the entire company. My replacement told me they were able to make the next generation with more complex electronics even more reliable.
Through my work career (starting in 67) my wife and I would get a new vehicle every 3 years alternating mine and hers. At 6 years and about 60k miles reliability sucked. Now our most frequent driver is an 18 year old car. We have a newer car for long trips due to bells and whistles. Then their is our 2015 F-150 with every option I could order. Comparing to my 73 F-250, 3 times better fuel economy, 3.5 times further between oil changes, no breakdowns in 32k miles while the 73 stranded us in the Nevada desert at 11k miles due to a failed oil pump. The 73 F-250 actually broke our trade timetable lasting only 40k in 4 years. The good old days really sucked. I'd say the same goes for tractors until my
L5740 h@d to be split at 850 hours due to a failed seal at the fwd output shaft at the transmission. That failure should never happen.