This is not a critique of nuclear power. It is simply a (mildly existential) realization that even with high reliability goals, failure is still possible.

I expect the teams developing ATC communications and the team maintaining the CANDU DCC to be distinct and not have many dependencies.