Common-mode failure

Independent safeguards stop being independent when they share something underneath.

The same supplier, the same credential, the same network, the same software update mechanism. Three layers of protection that all depend on one identity provider are one layer wearing a costume. The exercise worth doing is not counting controls but asking what they have in common, which is usually more than the diagram suggests.