On the 737-600, one of the Next Generation models introduced in the 1990s, Paul Russell, the product safety executive, stood up to argue with colleagues who were thinking about making a change to the fuel tank that might have created a single-point failure. “How much blood do you want on the seat covers?” he demanded of people in the room. (The design was changed.)