Sensor falure viewtopic.php?p=844883#p844883
A failed sensor triggered a safety thus limiting the engine severely.
Tanabe: “We were on the edge on terms of cooling,” he said.
I guess that every cylinder has it's own O2 sensor.
This question was asked on the F1technical subrddit recently. Take of it what you will.