Oil-immersed Transformers have two distinct thermostats as the protection. A single thermostat rings the alarm while the opposite trips the circuit breaker. Like all vital systems, there has to be backup pumps in case the primary pump fails. There's a key pump that's electric, a backup pump that's electrical, in https://firetechno.org