[...]
However, this draft does not
address another major drawback of the RFC 3178 approach, that
it does not protect against the complete failure of one or more
connected ISPs.
==> I think this is something where one should make a reality check. How often is it that the _whole_ ISP fails? Pretty much _never_,
unless you count 1-man small ISPs which don't even have redundant connectivity and routers (and we shouldn't care about this).