Why only two AoA sensors, then? Why not a hundred?
In designing airframes, there's actually guidance along these lines to remove the ambiguity of how many sensors are necessary. You can use calculations to define what level of reliability is sufficient. As an example to this point, there are standards like IEC 61508 that outline the procedure for doing such calculations. Many organizations also create their own standards (e.g., five redundant sensors for mission critical systems, self-diagnostic sensors for safety critical systems etc.) It shouldn't be guesswork. It's a risk-based decision, not a subjective guess as to whether two or "a hundred" sensors are necessary.