I would not recommend patching servers directly into the CSS's because there are scenarios where a CSS failure kills all servers plugged into that CSS. In addition to the condition that you have already seen, you have the case where a CSS itself could crash, and those servers would be unreachable.
If you plug your servers into a back end switch or VLAN and use the CSS as the default gateway for that subnet, you can use VIP/Interface redundancy, and eliminate the inter-css connection. In VIP/Interface redundancy, the only reason for the css-css connection would be if you wanted to do ASR.