"R1...More generally, no software function should run during flight unless it is needed."

This means, that even using the most reliable language and trying to test as much as possible, there is always a risk of an overseen bug.