they did... it was just singly redundant. they would need double redundancy here. so 3 connections, not 2

Taking one connection out for maintenance and leaving only 1 live connection is not redundancy, it is a failed backup.

Redundancy is always having more than one live connection.