I think the qualification that Steve mentioned is the key here:



The issue in my mind is not whether either of the two scenarios - 1 or 2-up - is safe on their own, but whether there are safety measures available that allow the risks to be controlled.