I think their point is that the leak has a plausible route - and whatever protections we would institute were that to have been true - we still should implement - precisely because they could have been true.

In many safety contexts, the strong possibility of an accident is often considered as the failure - not just the accident itself.