In fact, they did that twice, before initial takeoff and after their first landing in Ottawa.
In fact, they did that twice, before initial takeoff and after their first landing in Ottawa.
They did a great job of handling the subsequent emergency, but I see no way around blaming them for it happening in the first place.
Instead look at what happened and say "if things had been different this couldn't have happened" and then make those things a reality. Maybe the answer is putting a sticker with metric/imperial conversion on the tank or something, so pilots aren't confused when checking with dipstick.
If you think they were truly acting in bad faith, you have other issues.
There's a wide range of reasonable "it's the pilot's fault" judgments which don't involve firing them or just shrugging your shoulders and saying "do better".
What really matters is what the fault implies. Finding the pilot to be at fault does not imply that people just give up on figuring out a fix.
That's why it's a good idea in complex systems to pre-assign to each requirement a responsible party. Otherwise, you could just use the "systemic effect" argument to either blame every party or no party in the system, neither of which is very useful.
If you are running an organization that deals with a lot of complexity (airlines, web systems etc.), it's generally not a good idea to blame anyone but the system. If you look at everything systemically, then the organization continually learns. You have to trust the people in the system to be coming to work in good faith, if you can't do that you have other issues.