If the software fails this often, they really should have some sort of reversion mode with multiple watchdogs that runs on a tiny microcontroller and just keeps the temperature at 70 degrees. If they can't get that right, maybe just a hard switch that wires in a calibrated bimetalic strip to keep the wheels on until the software is fixed.