[Insert red herring about MCAS and cop out about how redundancy is "hard" and "bad" "complexity".]
Have a minimum quorum of sensors, disable one if it generates impossible values (while deciding carefully what is and isn't possible), use sensors that are much more durable, reliable, and can be self-tested, and integration and subsystem test test test thoroughly some more.
