The most sophisticated systems use multiply redundant fail safe controllers,often using cores which can be garenteed to fail in a safe mode which makes the logic in the micro intrinsically more complex .Moving away from copper wire looms to optical control busses.
The design of failsafe logic is pretty specialised and the testing is a pain in the bum.