My understand is that with the Fukushima Daiichi incident, we knew this was a possibility. Managers thought they could manage the risk, because there was a likelihood that it would not flood during their watch. I don't know how organize to get around that behavior though