Perhaps another way to ask is "Have you had your _only_ ZD fail?" (and how'd that work out...)
We do have a limited autonomous WLAN feature coming in 9.7 which makes this more robust and easier to deal with. And combined with a support contract for quick delivery of a replacement, this offers good backup protection for most networks. But if you need high availability..redundant controllers are the way to go.