I imagine in that line of work, SW must consist of like 99% safeguards and checks of various kinds. Like rather double-check the thing the compiler already proved at runtime than discovering a rare compiler bug in 10 years during a complex oribital descent maneuver…

Have to reboot every 136 years, literally unusable.

Except in germany noone would ever dare blame/restrict private cars in any way. See eg the ridiculous “discussion” on a potential highway speed limit. For non-germans: Yes, speed on highways is generally unrestricted and for some reason that seems to be more important to us than safety or protecting the climate.