There is nothing more fun than sitting around, watching a lander do loop-de-loops for thirty minutes with no end in sight because one of the descent engines happened to be made-in-china and cuts out every time you're close enough to land, and makes it pitch over and throws the autopilot off. Basically, what I'm asking is that either there is a limited supply of fuel so that an engine failure actually has the implications of an engine failure, and/or (preferably and) the incidence of descent engine failure be DRASTICALLY nerfed with some means to prevent it altogether at the cost of extra expense.