'Pilot error' is never the root cause