The Saab 9-5 my Dad drives has a peg on either side; both lock in rather like a padlock, so both would have to fail before it pops up... and then there's still a latch in the middle. All three are welded separately to the bonnet.
A design feature that, it seems, Land Rover and Toyota would do well to consider.