Hi Whirlwind, some good points and ideas!
With attacks at altitude 1, you are correct, if the pilot check is failed, the aircraft crashes and dies – the rationale is that there is no room for error at altitude 1. If you feel this is too brutal, you could implement a second pilot check to see if he actually crashes or not. So pilot fails an attack at altitude 1, roll a second check, if he fails that… RIP in Peace in Peace
With regards to bombing, I like your idea, let me know how it goes. Other options might be to only have a certain percentage of bombs hit (like half) or to reduce the victory points gained from bombing (by half?)
Look forward to seeing how you get on!
Tom Jensen - http://ostfrontpublishing.com/