“The balloon would only be needed if all other failsafes have broken or been destroyed”, the source added. “Testing is to find the weak link in rehearsal – not on the day of the crisis.”