automotive: 2 relay circuit with extra double pole switch
Relay coils are very reliable, the most usual  failure mode of a relay that's switching an inductive load is for the contacts to "burn" and fail open-circuit.

In the case when the relay nevertheless fails closed you still have the protection of the engine's over-temperature alarm system.