I get using COTS but the decisions for this submarine would indicate that they have no grasp of the concept of failure modes.

Decisions like using a 3rd party controller (known to be terrible), a wireless controller (introducing a lot of extra risk from batteries to connection problems), and a door that cannot be opened from the inside (what if they get lost but manage to surface?) are all very sus.