(Also to protect against physical failures it works, because physical failures are more independent than software ones, as far as I understand.)