what I don't like about tendermint:
"If the validator causes the blockchain to fork while its coins are locked in bond, all of its coins are destroyed."
so if the developers make some mistakes, or I have some network problems or whatever and it forks, I loose the coins. Wow!
I didnt like it (yet?), but I think this specific issue you raise is fine: only a validator loses its own bond when they fail to function whatsoever.