Obviously there should be a physically separate circuit for cutting off power in the event of catastrophe. That's pretty much rule-of-thumb for large li-ion battery banks.