It's not just possible, but highly likely to occur in the near future. What if the company folds and there is a bug that causes it to halt and catch fire? What

It's not just possible, but highly likely to occur in the near future. What if the company folds and there is a bug that causes it to halt and catch fire? What stops a RAM/ROM bit flipping? Connected HSS is fundamentally a problem, not unlike IoT. I have several UPS's and not once did I think this might occur, because they are simply not attached to my network in any way. The triggers are based in hardware with a small microcontroller and are unlikely to fail. Systems that run for long periods and could cause damage should be developed differently. Core safety features should be hardware-based, you shouldn't be able to hack it and make it do something dangerous. If it has to be network connected it should be defensively designed.