At least you can find some comfort in that AF447 was the first fatal accident with the type, and that there's been continuous improvement throughout the years (including replaced pitot probes). But bigger design problems might have gone unadressed because it's difficult to justify a major change in a certified design until it causes an accident.