So basically the Tesla was doing what some have asked it to do i.e. react to lack of driver input. It was slowing down and probably wouldn't have wrecked except the driver took over and then human error intervened.
Agreed. I think there is still one improvement which could be made, though, which I'll talk about below.
Firstly, I think that job number one is to prevent a driver from becoming distracted, or incapacitated, in the first place. Once a driver has entered this state, there are much fewer options and things can go south quickly. In that respect, the driver failed. Autopilot's beeps and prods are designed to help prevent this, so in that respect, Autopilot also failed.
That's not really fair to Autopilot, though, since no matter what it does, the driver could still fall asleep, or worse. With level 2 autonomy there is little can be done, but still, there is something. I imagine this conversation between two Autopilot engineers:
A: "So, what do we do if the driver falls asleep?"
B: "We nag him awake."
A: "And if that fails?"
B: "We reduce power to the car."
A: "Great. But... you don't think he'd wake up in a panic, note that the car is slowing down, do something rash and roll the car, do you?"
B: "Well... maybe."
A: "But he deserved it."
B: "Yes."
A: "And what if someone is having a stroke?"
B: "Don't have a stroke."
To prevent this kind of situation, when disengaging, Autopilot should not allow driver input until the car has completely stopped. It's not like Autopilot was having trouble with the road. It could have continued driving, and thus would have been able to continue to stop safely. This prevents an incapacitated driver from immediately taking control of the car and doing something stupid when Autopilot decides to stop the car. After all, the driver is known to be incapacitated. They don't know exactly where they are, perhaps even what lane they are in, who is in their blind spot, how fast they are going, etc. And they may be groggy and paniced to boot. Why should they be allowed to resume driving immediately? They can do so after the car has stopped.