@Peter K Agreed that a patient attacker is the weak version of it. The stronger reason to mix vendors is that a same vendor quorum shares one failure mode, so a two of three stops being two independent checks and collapses into one. Nobody has to wait for anything, they get the whole quorum in a single break.
