The FAA and NTSB are very good at what they do, one of the very few examples of government services that work well together with industry, give them some time.
If we assume this airplane is safe, we can apply that probability to it and then ask P(2 Crashes|N Miles & 350 New Planes).
You would then have a probability for this just being bad luck, and compare that against your prior that this is a safe plane.
I haven’t done the math, but my gut says it would point to grounding the plane.
The MAX8 fleet has been operational for about six months. Assuming 3 flights per day: 350 * 6 * 30 * 3 = 0.189 million flights.
To estimate the probability of two accidents, we can use a Poisson distribution with x = 2 and μ = 0.189 * 0.39 = 0.0737
P(x=2) = e^(-μ)μ^x / x! = 0.25%
I.e your gut feeling is correct (if my math is correct, that is). If one uses the estimate from a sibling comment of 1 crash in 11 million fights, the probability decreases further to 0.01% Actually the correct calculation is:
1 - P(x=0) - P(x=1) = 0.26%
since we are looking for the probability of there being more than one plane crash -- not just the probability of there being exactly two plane crashes.
Look at things like Alaska Airlines Flight 261 [0] - safe airframe, deficient maintenance, plane loses all pitch control and impacts ocean. Yes, this still means that Boeing needs to improve things - single points of failures are never OK on a plane - but it also doesn't (IMO) mean the plane is fundamentally unsafe without those fixes.
(You can pretty much always make statistical inference, with uncertainty going up with the lack of data)
If we assume that the average MAX 8 has been in service for a year (first delivery was a little less than 2 years ago), and conducts 4 flights a day, we get this [0] - a mean of 1/250000. Still worse than 1/11000000, but only by a factor of 50 instead of 50 thousand.
0: https://www.wolframalpha.com/input/?x=0&y=0&i=beta+distribut...
I suggest you try the math as the odds are reasonably high.
This changes if you start talking about crashes since the first commercial flight, but those are again different numbers.
"Guts" are notoriously good at statistical inference
And no, the FAA is not really that good, general aviation pilots die all the time from negligence and the FAA doesn't enforce the rules when pilots violate them (in particular low altitude flying).
That being said, the government gives general aviation pilots a fair amount of freedom once they get their license. There are rules and they are enforced; particularly when violations put the general public at risk. But there's also recognition that it's quite possible to regulate GA out of existence like a lot of other countries have, and that has pretty negative consequences in terms of pilot availability for other purposes. Therefore, regulations scale with the amount of danger the public is exposed to.
For example, ultralight aircraft (single place, <254 lbs, <=5gal fuel, <=55kts) are virtually unregulated; the idea being that they're so small and light that they aren't much danger to others. LSA/sport (1-2 place, <=1320lbs, <=120kts) are regulated; require a license and inspections but less stringent than a private license, and so on. Private licenses can't be used for commercial purposes, and generally speaking more training and endorsements or ratings are required for eg. aircraft with multiple engines; those that are >=12,500 lbs, those that land on water, those that have old-school landing gear, etc. etc.
§ 91.119 Minimum safe altitudes: General.
Except when necessary for takeoff or landing, no person may operate an aircraft below the following altitudes:
(a)Anywhere. An altitude allowing, if a power unit fails, an emergency landing without undue hazard to persons or property on the surface.
(b)Over congested areas. Over any congested area of a city, town, or settlement, or over any open air assembly of persons, an altitude of 1,000 feet above the highest obstacle within a horizontal radius of 2,000 feet of the aircraft.
(c)Over other than congested areas. An altitude of 500 feet above the surface, except over open water or sparsely populated areas. In those cases, the aircraft may not be operated closer than 500 feet to any person, vessel, vehicle, or structure.
(d)Helicopters, powered parachutes, and weight-shift-control aircraft. If the operation is conducted without hazard to persons or property on the surface -
(1) A helicopter may be operated at less than the minimums prescribed in paragraph (b) or (c) of this section, provided each person operating the helicopter complies with any routes or altitudes specifically prescribed for helicopters by the FAA; and
(2) A powered parachute or weight-shift-control aircraft may be operated at less than the minimums prescribed in paragraph (c) of this section.
Except when necessary for takeoff or landing, no person may operate an aircraft below the following altitudes:
(a) Anywhere. An altitude allowing, if a power unit fails, an emergency landing without undue hazard to persons or property on the surface.
A perfectly good airframe can have its reputation ruined with 2 incidents in a short time period.