Yeah, but real life doesn't really work efficiently with backup plans, that's the problem.

For efficiency what we do is we centralize and wherever possible we add safeguards and controls to the central authority, as auditors call them, mitigations.