> but to paraphrase the designers eliminated the physical locking mechanism and had this attitude that "oh it's electronic so it won't wear out and fail".

And it would have been entirely fine if there was electronic safeguards put between code and rest of the device, just like some stop lights have it (if control board sends green signal to both directions it fails out and doesn't allow that). Defense in depth and all that