What about integration/ subsystem level testing? It seems MCAS wasn't thoroughly tested with all boundary values. Whats the use of systems like IAHM [1] if they can't predict what faults can occur how safety is ensured/ guaranteed in various scenarios.
[1] https://www.phmsociety.org/sites/phmsociety.org/files/Fielde...