Ejection at a moment's notice has to be simple and easy, and so accidental ejections still occur:

* http://www.vfp62.com/f14_rio.html

* https://www.theguardian.com/world/2009/nov/02/south-africa-p...

I'd argue that very few computer applications need something that works like an ejector seat lever. In most software applications you have more than milliseconds or seconds to make decisions about big, dramatic (and potentially irreversible) changes, and thus they should have multiple levels of confirmation.