Its usual for an external watchdog to be added for industrial applications that cannot be disable ( or fail to be enabled) by firmware/software.
Oh wow, thanks. I'm using rpis in my home automation and never knew about it. I've been using micros (mostly arduino) as watchdogs. This sounds so much better.