This would not work because the backup does not perform any IO and simply operat
es using the values returned by the primary's execution of IO instructions. In e
ssence, the backup's disk would not change along with the primary's. To change t he protocol to get a multiple-disk setup to work, we would have to worry about k eeping the disk IO operations in sync between the backup and the primary, and th e paper clearly indicates that syncrhonizing environmental actions is a problem not worth handling.