“Layers of redundancy are the central risk management property of natural systems…. Redundancy is ambiguous because it seems like a waste if nothing unusual happens. Except that something unusual happens—usually.” —Nassim Taleb