Youīve made a good point here. Redundacy requires a thorough study of possible reasons for failure and dependencies. Sometimes having two identical items will be enough (if one lighter is empty it doesnīt effect an other one) sometimes it requires a different principle (like in your example with the stove).<br>One of my instructors once said: 'There isnīt such a thing like a little thing. There are only details. So take care of them.' . Well, taking care of the details saved my day more than once.
_________________________
If it isnīt broken, it doesnīt have enough features yet.