The current situation with most commercial airplane equipment is that:

• It’s triple redundant (second backup) if a failure would put the ship at serious risk of total hull loss or fatal injury to crew.
• It’s double redundant (just one backup) if a failure doesn’t jeopardize the whole ship, but there is a risk of serious or fatal injury to passengers. This also applies if system failure significantly increases or burdens crew workload.