The simulation points at the possible problem and solution. A big problem seems to be the slosh crashing into the tanks on engine ignition. The solution would seem to be just more time separation between the individual engine ignitions. I wonder why they didn't do that.