[bitwalker]

Those aren't the only failure modes - you can have two sets of servers partitioned from one another (in two different data centers), both of which are reachable by clients. Do you allow those partitions to remain available, or do you stop accepting client connections until the partition heals? The "right" choice depends entirely on the application.

[cryptonector]

In TFA's world-view clients will not talk to isolated servers.

[thayne]

So that would be choosing consistency over availability.