> Many safety-critical systems do not use encryption because it's one more component that can fail.

This is a good point but isn't some data still better than no data at all? If we decide not to collect encrypted data because encryption can break, then we have exactly no data if we lose the blackbox.