Your 1000 seats crashing won't prevent airplanes from landing.

These things should have gone from mainframes of yore to various unix systems, ideally a mix of different unix systems in hot failover.

Without running uncontrolled "agent" software of course.