One note, if you want the highest safety, it helps to have a free disk slot for the replacement disk. ZFS has a somewhat unique feature that allows replacing of failing, (but not yet failed), disks by temporarily mirring them. From the command line, it looks like this;
zpool replace POOL BAD_DISK REPLACEMENT_DISK
When the replacement is complete, the bad disk is removed from the pool.
So, RAID-Z2 can be made safer with this free slot.
Of course, this only works with failing, but not yet failed disks.