There is an interesting counterpoint to this in victorian era railway signalling systems.
Now the operator interface for these consisted of banks of levers that worked the signals and points by means of a system of wires running over pullys, visibility from the signalboxes was not always brilliant and especially in fog keeping track of what was where was problematic.
In a fit of absolute genius it was realised that the (mechanical) logic could be implemented so as to prevent a signal being set at green if the segment was occupied and also to prevent the points in an occupied section being moved (this in an age before Turing, you will note). This was clearly a good thing, right?
Well, the signal men protested that sometimes they had to do the unusual and that they were highly experienced professionals (all the usual) and the system was modified so that a special key could be used to override the interlock logic, this key being held by the supervisors office.
So many train crashes over the following few years featured that key, that it ended up being UK practise that any collision between trains that caused a fatailty would automatically result in the signalman being arrested on suspicion of manslaughter.
It is a fine line between stopping the professional applying an override to fix a critical situation and leaving them able to tear the wings off by accident.