I'm pretty sure that there are error modes in which the recurring charge fails, and CiviCRM records that it was successful, and vice-versa. These are both really bad.
See possible examples in T105041
Sorry, this is all I got for now. I thought there was already a card for this issue, but can't find it.