Is state only affected by the controller, or by the cluster as well? The cluster is now only `ON_FIRE` if there is no longer a quorum of running members, and some members are also `ON_FIRE` so checking both seems appropriate now.