Controls can share people, equipment, information, power, maintenance and common failure modes.

What matters isn't how many boxes appear between the threat and consequence.

It's whether the protection is genuinely independent.