There was a time when most cars had a completely mechanical device called a clutch pedal that disconnected the engine from the transmission when pressed. And they also had a proper shifter that actually allows the driver to select the gear. Sadly, they're becoming very hard to find in a mainstream car nowadays. It would have prevented almost all of the "stuck accelerator" accidents by giving the driver a backup.
And at the same time, require that turning off the engine does not lock the steering wheel. Then drivers would be able to just turn off the engine in an emergency without worrying about locking the wheel.
is there no redundancy on the throttle system? 2 sensors, 2 µC's, each sanity checking the other with a failsafe routine ready to fire should one decide to fault. is this not how its done?
There is on Toyotas. There are two sensors on the pedal and two on the throttle valve, with two independent processors for control. If a fault is detected, the engine defaults to idle or turns off.