Is "deny Access" a Valid "fail-Safe Default" Principle for Building Security in Cyberphysical Systems?

In 1975, Saltzer and Schroeder (SS) elucidated eight design principles that shaped decades of security research and development. Some of them are listed as key tenets of security protocols in software design methodologies, such as Microsoft's Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege threat model and in McGraw's 2004 article "Software Security" in IEEE Security Privacy. Are they still valid.