Why Test a System to Failure?