Having read up on it quickly, the real issue was with a lack of tests and failure handling, so you're not wrong.
Apparently this code wasn't even necessary to run after liftoff, yet it caused the self-destruct.
Crazy.