Robert, You raise an interesting point: if MCAS was so dangerous, why didn’t more planes crash? The answer is the that the danger would only manifest in a small subset of circumstances — most notably, when one of the angle-of-attack sensors was faulty. Even when the fault manifested, as you point out, a skilled pilot could figure out how to wrestle the plane back onto the ground. But a system doesn’t need to be 100% deadly 100% of the time to be unacceptably dangerous. The goal of the FAA is to achieve a zero percent accident rate; to reach that, planes must be built without any hidden gotchas, even ones that will kill only the bottom 10 percent of pilots.