Broken by Design: MongoDB Fault Tolerance