I would agree. 

1. Keep the solutions simple and thus reduce the potential failure modes. 

2. In certain contexts, introduce redundancy. You increase potential failure modes but provides continuous operation in case of a single failure.

3. Design those redundancy solutions dissimilar as to not fail from common failure modes.