As critical as the MCAS system has turned out to be, 2 sensors are not enough. There should be a minimum of 3 AoA sensors to allow 2 good sensors to outvote the bad sensor.
...
See the link in my post #12.
I heard this morning on the local KING 5 Seattle news that one of the fixes for this is the computer system will onky try to nose down once if the pilots try to fight against it. It will supposedly shut itself down and let the pilot fly the plane.
I would also consider integrating all relevant sensors via an AI scheme to make sense of true ground speed, pitch attitude - anything a pilot would want to consider when evaluating a sensor conflict in order to make sense of the situation. And even with that, you would want pilots to routinely get in manual hands-on flying experience on an systematic basis - and a clear understanding in the cockpit of how to take manual control instantly.