Comment by john_b

What failure mode would you want, if not off? Having a failed sensor+controller control temperature in any way isn't what I'd want. One could have a backup thermostat as a fallback, but I doubt their average customer wants anything that complicated.