I agree, all i'm saying is, if you need to worry and thinking of alternative "fail safe swithc", then you probably shouldnt use that ato.
Timers and stuff can also get broken, mailfunction, etc....
So, i think that ensuring one device fail safe with another device who can also fail is not a best possible way to go.
We became too dependent on "technology", but, if one makes step back and rely on simpliest law of physic, then he can make bullet proof system.
And only law that counta here - dont have volume of water in A that B cannot handle without spilling over.
I buildt my ato probably 10 years ago. Simple 2 float valve, relay, some wires and socket. Yes, there is option that both switch fail, even in same moment. Even if you have 10 fail safe switches, they can fail in same exact moment.
But, if your ato container have less water in it that sump or tank can take.... Then there is no way for system to fail, it is impossible to flood.
Ato container in my case is 25l (which is good for 3-5 days, depends on evaporation. My sump have "room" for app 100-120l of water.
In case everything goes south, and tank drains to sump, and ato dont turn of pump..... I still have available space for all of that water to be safely contained in sump.
Only thing that, in this or similar case i cannot prevent is probability of pump overheating and fail when left to run dry.
And that is only real and safe case when dealing with water - make sure that A can hold much more water that is in B.