One network can be a fully redundant design with multiple geographically distinct links and so on.

But it does not make it 100% resilient to cascading failures or possible Layer2/3 loops that might happen during a software upgrade, especially in a country wide deployment.

The FAA will give a root cause at some point of why this happenned.