Redundancy Does Not Imply Fault Tolerance