Sometimes I am not so good with visualization in my head. I have been getting better with that! However, I just want to regurgitate some things to you to be sure I am on the same page.
The heaters are connected to a base outlet, which is how they are controlled via a controller. The controller uses the probes, and kicks the heaters on and off accordingly, much like how an Apex would work? So, if these heaters do have internal thermostats, they are more than likely being overridden? If I could get a picture it would help me understand the placement better.
I agree with the original comments, a single 250W heater sounds undersized for your tank. Having a second heater would address that and give you some redundancy. If you do lose one heater however you will need to replace it fairly soon otherwise your tank will start to run cooler again. There are a number of good brands out there, different people like different ones, but Eheim is certainly a reputable brand with a good reputation. I run an Eheim in my FW tank personally, but for no particular reason a different brand (Aquael) in my SW tank, which is also a good brand.
If you run your heaters off a controller, with two active heaters, you can set them to both go on and off at the same temperature. You should then set your heater’s internal thermostat just above the off temperature, that way if your controller fails on the internal thermostat will stop them cooking your tank.
I use a different system however to cover more bases. I have a 65g tank and a 300W main heater controlled by my Apex. The internal thermostat of the main is set to turn off just > the off setting of the controller to allow for a controller failing on situation. I then have a backup heater not connected to the Apex and only controlled by it’s internal thermostat. It is set to turn on just < the main heater’s on setting in the controller. This gives me protection against the controller failing off. In both these cases I would get an Apex alarm advising of an issue.
The other situation to protect against is the controller, or the backup heater, failing on. In my case I have a chiller which would kick in to ‘fight’ the heaters and either manage or at least mitigate the situation. If it was managing the issue I would not get an alarm and would have to rely on manually noticing the chiller was permanently on. If it was only mitigating the issue and the tank temp climbed above the high alert I would get an Apex alarm advising of that issue. If I was able to get an EB8 (I am in Australia) I could set an alarm to advise of a chiller running unusually long.
You could do similar with two main heaters and a third backup heater. Like me however you still need a way to protect against controller or backup heater failing on.

