IMO, redundancy is key. First, if your RO reservoir is small enough relative to the tank, it can't completely drop your salinity. So, for example, my system is 300g total volume and my RO reservoir is 20g. It's never entirely full so, in the worst case, if the ATO drops all of the water into the sump, it'll water down my salinity by less than 7%. That's a drop from 1.025 so to 1.023 or so (less if the reservoir is less full). That shouldn't kill any corals and the fish can handle a much bigger drop.
Second, an ATO that automatically turns off is a must. I've used Tunze Osmolators for years on all my tanks and they are very reliable. (For those above who commented that they clean the sensor several times a week, I've typically gone 3-6 months without cleanings and, sadly, at least a year on some occasions, and they've never failed me. Your maintenance practices are certainly better than mine but I think you can safely go much longer than weekly without cleaning the sensor).
Third, it's a good idea to install a float with a shutoff. I've done this on some, but not all tanks. Apex with a break out box makes this really easy. Just install a very inexpensive float and a few lines of code and forget it. The code is easily found here or on the neptune forum. In my tanks, the floats have never been triggered but it's good peace of mind. Of course, if you don't have a controller, this is much harder to pull off.
Fourth and finally, to spare yourself the wet floor, if possible, it's good to install a drain line in the sump. One of my tanks happens to be near a drain line, so I have a 1/2" bulkhead as high as possible in the sump wall draining to the drain line. On one of the tanks, there was no nearby drain but it was against an outside wall so I did the same thing with the line draining through the wall to the outside garden. If you don't have either a drain or an outside wall, you could, if you have space, have such a drain go to a second sump/tank with an ALD or float valve to alert you if water ever drains into it. The idea is to put an overflow valve high up in your sump so that, in the unlikely event the water level in the sump rises too high, it doesn't overflow.
Realistically, you don't need all of these. Any two of these steps should keep your floors dry. There is a risk that if you use the overflow drain, you can keep your floors dry but a runaway ATO will turn your reef into a freshwater tank so, if you do use the drain, I highly recommend either using an ATO like the Tunze with the built in shutoff, or installing a float valve slightly lower than the drain bulkhead to signal your Apex to kill the power to the ATO. That way, the ATO turns off before the drain comes into play and the drain is really only there for a double-failure where the ATO and float valve fail.
Bottom line is with a little redundancy you can reduce the risk of diluting your saltwater or overflowing your sump to about zero. I've used some variety these approaches on every tank for about 20 years and have yet to have a runaway ATO problem.