There is also a hi limit temperature probe that will shut down the heater if the temperature exceeds a certain temp (150 in my case), which will happen pretty quick if the water isn't flowing. So even if the water pressure sensor fails, there's some additional insurance against total meltdown...