Trebuchet
Penultimate Amazing
There was a great example of a design allowing a single failure to cause the failure of redundant systems in United Flight 232 that crashed in Sioux City Iowa in 1989. This was a Lockheed L1101, a Tri jet (two engines under the wings, one engine in the tail). .
[pedant mode] DC-10 [/pedant mode]
McDonnell Douglas afterward did considerable research into controlling airplanes with engines alone. But it died after the Boeing merger.