Safety in Avionics: When the Average Isn’t Good Enough