It should be implemented with the same robustness as if the user's life depended on it.

As an analogy, you wouldn't implement a car brake by running it through some firmware. Instead, you'd preferably make a direct physical connection between the pedal and the actual brake.