It has long been known that randomness can be used to create subliminal channels (see Simmons' "Prisoner's problem" in 1983) and that preventing such subliminal channels is hard.
For the case at hand, Simmons proposed a protocol for preventing subliminal channels within the random numbers generated during the creation of DSA signatures in his "An Introduction to the Mathematics of Trust in Security Protocols" paper in 1993. In Simmons' modification to DSA, the signer Alice (A) tries to communicate a subliminal bit b to Bob (B), communicating through a warden (W) who tries to prevent subliminal channels. The approach to prevent it is basically forcing A to incorporate some randomness that W provides A before A generates the final signature. The rationale of subliminal-freeness being that A can no longer choose the random number on her own.
However, it was later shown by Desmedt in "Simmons' protocol is not free of subliminal channels" that even in that case, there exists a specific type of subliminal channel, which I've seen sometimes referred to as fail-stop subliminal channel. This type of channel works as follows in the DSA case: since A has access to W's randomness before producing the final signature, she can (a) halt the signing process if the last bit of the signature after having incorporated W's randomness does not match b; or (b) complete the process if, after having incorporated W's randomness, the resulting signature's last bit matches b. There may of course be more convoluted ways to decide whether or not to keep going, but that seems to be the overall idea.
My doubt comes at this point. After this reasoning, Desmedt argues that, in order to show whether or not a channel is subliminal-free (i.e., no subliminal channel can be created within it), only the case in which A does not stop should be considered, as in the case in which she stops, W detects that some suspicious behavior is taking place and thus no subliminal exchange can occur (because W detects it, which directly contradicts the principle of subliminal communications). So, following this argument, a system with a fail-stop subliminal channel would (assuming uniformity of the bits to transmit in a subliminal manner) be detectable 1/2 of the executions.
But then, this subliminal channel is of little use in general: if I have a device/software that fails 1/2 of the times, I would, in the best case, assume it is a quite useless device/software and would change it for another different device/software, so no subliminal communication would be possible any longer (and probably, I would think that something weird is happening in that device/software).
Main question: Is this the way in which fail-stop subliminal channels are expected to work, or have I misunderstood something?
Follow up question: If this is indeed the way they do work, when does this type of subliminal channels make sense in practice and how can they be used? (Note: I am not asking in what kind of real-world scenario would a fail-stop channel be applicable, although that can of course help. Rather, I am interested in how could a fail-stop channel be used without the warden detecting/highly suspecting that subliminal communications are taking place and deciding to discard the involved software/device.)