Dual engine shutdown is incredibly dangerous, there's no situation (other than a commanded shutdown) where that should occur.

Regardless of cause, regardless of if the pilot activated the thrust reverser too early, this is an incredibly dangerous defect that Boeing (or Rolls Royce) needs to fix before more people are put in danger.

Let me phase it this way: Even when the engines are literally on fire, they don't automatically shutdown, because doing so is considered too dangerous (since the systems don't know the circumstances, and even an engine on fire can generate thrust, and it might be your only engine).

Even if the defect was DISCOVERED due to a pilot error, it is still a defect and a safety critical one at that.

Pilot error happens and the equipment is expected to make it as difficult as possible. If a simple action can endanger a plane-load of passengers, that’s a bug regardless of whether the pilot is supposed to do that.

Depends if "too quickly" means "clearly dangerous, so the system prevents a risk, and it's clearly the safer thing to do" or "fast enough to trigger the bug"? And even if it is the former, presumably it should be signaled and restart possible afterwards.

I tend to agree after reading the bulletin. It seems to be a safety net for the plane/engines that maybe needs better input validation so that a pilot eager to hit the brakes cant do this again. In this context its a UX bug.

There should be manual override. What if this happened in-AIR?

A pilot engaging reverse thrust mid-flight can break apart a plane:

https://lessonslearned.faa.gov/ll_main.cfm?TabID=3&LLID=34&L...

You really, really do not want the reverse thrust to turn on in-AIR. That would be way worse then then engine shutting down.

I don't mean specifically reverse thrust. I am saying features such as this. The Pilot expects something and computer does something else.

There are usually failsafe modes that disable most of the additional software features. It is pretty rare though for pilots to switch into those modes though since those features are what fly the plan a majority of the time.

It is like the issue that are running into with self driving cars, there is a point where the flight controls become so good that pilots are less likely to intervene when something is going wrong.

It has occurred. Lauda Air Flight 004 was a Boeing 767-300ER that crashed due to an uncommanded reverse on the number one engine.

The aviation safety world doesn't believe in pilot-error.