Did it ever occur to you that a failure in a component in a machine specifically built to control fire might lead to uncontrolled fire in places you don’t want it?
And given that we were aiming to have the oven turned off at/near the breaker most of the time, except when in active use (and therefore at least reasonably human-monitored), the risk seems acceptably low.