It's incredibly unlikely, but not entirely unforseeable that enough sensors would fail at the same time for the same reason. All four engines on the 747 BA9 failed at the same time due to volcanic ash [0]. If you just take the median of nine, it's possible that a mere five failed sensors could break MCAS. And then you are back to the issue of handing over to the pilots.
[0] https://en.m.wikipedia.org/wiki/British_Airways_Flight_9