and the primary and secondary network will not fail simultaneously for a large number of nodes.
It's nice to see that everyone has the same problem:
There is no approach to identify wrong assumptions.
But what's the conclusion?
Should we stay away from huge systems, because the damage due to a wrong assumption in a huge system is huge?