- a system whose failure was eventually qualified as 'hazardous' could have a single point of failure (a single AOA vane)It's a redundant system. You can turn it off and fly the airplane.
- documentation of the system was minimal (before the 1st crash)Minimal does not mean insufficient.
- 737 MAX simulators couldn't adequately replicate MCAS activationThe simulators can still train the correct response without the actual force feedback.
- after the 1st crash, a service bulletin informing airlines was released stating that the MCAS could deflect the tail in increments up to 2.5°, up from the 0.6° told to the FAA in the safety assessmentThe speed was increased later, the speed given the FAA was correct at the time.
- MCAS could reset itself after each pilot response to repeatedly pitch the aircraft downThere are two switches. One that resets and one that turns it off. Training is to turn it off.
- no provision to deactivate the MCAS system was made other than by completely shutting down the non-malfunctioning electrical trim systemThe MCAS is a part of the trim system just like the malfunctioning AOA gauge is part of the system. Regardless of which part fails you deal with it by turning it off.
There is no reason to blame Boeing for anything except a lame PR response.