It strikes me as a software design problem. In industry, the Emergency Shutdown button on the control screens for, say, a refinery, will have second "confirm and execute" popup screen. You don't want to have the ability to execute control actions that have major consequences without confirmation. Sort of a "two key" approach (bad joke!).