They're a backup system if the currently in-use systems fail. If they work only 99% of the time, they've cut accidents in the class they are designed to prevent by 99%. That's excellent. Perfection does not seem any more necessary here than in other contexts, and seems like the enemy of the good.

This compliant seems to me akin to me not backing up my computer's internal drive to this external drive I have sitting on my desk, until I can make a little RAIDed setup to address the small probability that the backup drive will fail. Having no backup at all is worse than requiring a high standard to the point that the backup may not be implemented.

It's not like if they break, nobody will notice. Install them, have a process to verify they're working regularly, fix them if they break. Any downtime whilst they're being fixed is just as risky as every day the project is delayed to to this high standard of reliability.