If the switches have an unknown design flaw then it’s unknown how likely it is they’d both fail simultaneously

My understanding is these switches are used routinely during the shutdown procedure or did I get that wrong?