I think the point is that neither of those events should take out a whole city; the design is such that there is considerable redundancy in the system.
Indeed. For instance, power grids ideally operate with N-1/N+1 redundancy, i.e., the disablement of any single power line should not cause a cascading failure.
