I have Rpis controlling my various plant-grow-lamps around the house; the relays they switch are set to fail-open so if they fall over I can go back to manual control; so you probably assume correctly. Now if the relays themselves get sad I'd probably be in for a bad time but fixing that seems like a reduction problem? (I speak as someone clueless about actual EE beyond treating it like legos)