I agree. I think this is due to the following rules :

1. run everything above the standards without compromise.

2. having a production-independant control organization to monitor that everything is done according to 1. And that has the power to shutdown a plant.