I had a similar experience one time where I crashed a core by reading a bit in the PLC app with the IDE app through the datalayer without proper delay. Now in my case it did not actually crash the whole core, just the apps managed by the automation core. And I was able to recover after a power cycle by uploading functional code into the IDE app, which still ran even with the automation core in service mode. Now if a customer is using a third party solution and is connecting different systems through another data broker, they would be just as capable of crashing part of the system. So I prefer to look at it as a matter of risk versus reward of having connected systems. If you are going to have connected systems, then an all-in-one-device is quite advantageous in providing a uniform architecture.
... View more