I always thought that water ballast tanks were a simpler, more reliable technology than canting ballast.
It is possible to design the tanks so they automatically empty, if the boat capsizes.
There is no remedy if the canting ballast strut breaks off.
I always thought that movable ballast should be a minority portion of total ballast, say 1/4 to 1/3.
The BOC, Around Alone, and Vendee committees didn't see it that way.
No doubt, the canting ballast system makes for a faster boat than a shifting water ballast one. But if they were compared on a cost per performance bases, that probably wouldn't be so.
Safety wise, it is much easier to design a shifting water ballast boat that won't fail, than it is to design a canting ballast one that won't.
The canting ballast is vulnerable to three things:
1.) mechanical failure of the canting mechanism,
2.) structural failure of the strut (apparently the most common form of failure), and
3.) massive strut and hull damage due to striking a shoal or other underwater object.
The major hazards with a shifting water ballast system are:
1.) the ballast ending up on the leeward side, encouraging the boat to capsize,
2.) the ballast on the windward side contributing to a capsize, once the boat heels beyond 90 deg., and
3.) the shifting water ballast tanks holding the boat upside down after a capsize, due to failure to empty on the high side, as the boat tries to right itself.
IMHO, the second group of hazards are far easier to deal with than the first.