If one servo fails in the seized state your ok because the other will still power the tail. What I would be inclined to do is mechanically limit the rotation of the bell crank to say 5degrees, that way you maintain a degree of control whatever happens. Nice model Mark.

m