What troubles me is the large number of spillway failures. And the implications of those failures. And the root cause of those number of failures.
First, clearly the problem (failure of the concrete surface and substructure) ON and ABOVE the surface of the spillway walls at high flows is not being solved now, nor was it correctly approximated and solved in the past assumptions and construction. The combination of huge (but constantly, instantaneously varying) turbulent impact forces, combined with small but also continuously varying cavitation forces (the vacuum formation, then rapid re-collapse and micro-shocks as the bubbles re-form and re-collapse) is immense - and not be solvable at all even with today's higher-speed computational fluid dynamics FEA models. But even that is telling: If we cannot even determine consistently with the "pure theory" of these massive water flows, how do you design a system to withstand them under emergency conditions? If the models are not "accurate" to a sufficient degree to predict the specific multiple failures we see worldwide when the spillways are used at high flows, how do you re-design existing spillways to prevent a future loss? If "testing" breaks the spillways that are tested, you have to rely on the CFD models to go forward.
Second, the failure inside the walls between the impact and cavitation are not being absorbed reliably in what was the original (and repaired) concrete, rebar, and steel liner designs. Here at Oroville, if the mid-span conrete and rebar were adequate, the spillway would not have torn in half between the upper curve (a lower flow pressure area), and the lower straight discharge region with its spray breaks. Instead, the spillway floor tore out at the concrete expansion joint/construction joint.
Third, the failure BELOW the walls and floors between the spillway concrete and the rock below. Maybe that is inevitable: After all, if you don't know the underlaying material and so cannot estimate how much strength is needed to support the open "spans" between good support and weak support areas under the concrete being pounded by unknown forces from above, you can't design and pour the concrete around the any rebar network strong enough to absorb the blows. But, how many existing dams worldwide have been properly surveyed and prepared underneath? Almost as soon as the Hoover Dam was filling, the poured "joint" between the dam and the rock underneath began needing repairs and grout to seal leaks, strengthen the rock against tearing forces.
The tunnel walls under Hoover used steel liners to define the flow lines and reduce turbulence in the original bypass tunnels, which were then plugged at the mid-point and adapted as spillway tunnels. Expensive, but those liners might be needed many places.
Here, bare concrete over bad rock failed even before significant emergency flows were needed in a spillway - for a dam designed 30+ years after Hoover. Doesn't speak well for "lessons learned" and "better design analysis" for the dam industry over the slide rule era. Now, in the computer era, what else do we "not know we don't know"?