No simulation can justify 1 sensor as the only input to override pilot control.
This was criminal, no doubt in my mind...
Airworthiness certification for a plane without redundancy in a system is NOT about simulations.. the need for redundancy had been a requirement for civil aviation for a long long time... there was criminal activity involved in this plane getting certified for airworthiness with a model that had only input from one sensor allowing the override of pilot control..
There is no other way this happens unless you believe that all of Boeing and all of the FAA are innept.
You will find evidence that folks inside Boeing and the FAA warned that this was not acceptable I guarantee it.
Either folks in Boeing lied to the FAA that more than one sensor was used for override.. and the FAA didn’t verify. Or someone(s) in the FAA took a bribe or Boeing’s political connections forced an override of the FAA internal folks objecting.
This will have chronic capitalism at its core one way or another