It actually sounded EXACTLY like ordering a car in that article. But I agree, that doesn't make it right. As a customer, I'd certainly prefer if my airline has purchased all the available safety and navigation options.
Almost everything is an option. All of the electronics, the engines, fuel tanks, brakes, floor loadings. If you can think of it, it's probably an option. And like your car, the price of options can easily exceed the base price of the vehicle.
From experience working with redundant systems in a completely different industry (IT), two does not maketh a quorum. 1 sensor is absolute, 2 can disagree and only 3 can isolate a single faulty sensor. That's without even considering the rabbit hole of what happens if 2 sensors are faulty.
If they disagree, a light illuminates and the humans flying the plane have to sort it out. This isn't as controversial as some people are making out, although fair to say any redundancy that you can build in cost effectively is a good thing, but you know, back to my earlier point about 4 engine aircraft....
A light illuminates. Such an easy line. When this sort of thing starts going wrong, it's not normally just one warning, but very likely a multitude. Mix in lights, EICAS messages (assuming the 737 has caught up with EICAS), and aural warnings, and very little is simple. QF30 threw up 25 simultaneous EICAS message. QF32 over 50 ECAMs...plus a few lights.
BTW, a four engined aircraft is over twice as likely to suffer an engine failure...though it normally matters a bit less.
When an Airbus gets confused, it reverts to alternate or direct law. It stops any computerised games, and simply hands the aircraft back. The MAX? Well, perhaps not....
Adding to the above, it would be unwise to suggest that just because no Max 8 with dual AoA sensors and a disagree light have crashed as yet, that they would not do so in the same circumstances (whatever they are, in ET's case as we do not know yet).
Very true. But, I thought all of the MAXes actually have dual AoA sensors. The option is for a third sensor, and/or for dual displays. The two items are separate. The concept of a system that uses trim to override pilot inputs, without a sensible cutout is the stupid issue here. The vast majority of airliners currently flying have no AoA display, and to be honest, most pilots would have limited ability to use one anyway.