Is it possible to say a little bit more about the nature of the 'complete failures' ?
Were both braking circuits affected - ie was it a total loss of brakes on all four wheels. (only leaving the parking brake, which I would imagine would be virtually no use in de-accelerating the car)? Or was it just one of the dual circuits that failed, leaving some braking available on two wheels (but with the possibility that the other circuit might also fail at any time) ?
I guess the question I'm asking is, just how good is the redundancy in modern cars with dual braking circuits ?
A point I have often wondered about. Since the introduction of twin brake circuits, many years ago, I though it very unlikely (if not impossible) to get a total brake failure. SimonH states that even if the brake master cylinder is full, one can still get a catastrophic failure. Would an expert please explain how.