yeah the default in this case has to be “off” to prevent damage from running blind, on that note other things in the house should be certified to be able to handle being frozen perhaps
It is extraordinarily hard to design something that can withstand that pressure and still be fit for purpose. The item needs to be able to withstand pressures in excess of ~10k psi for -10c, with the pressure rising as temp decreases.
The standard solution for people that need to winterize a building that will not be heated is to drain as much water as possible from the lines, and then fill them with a liquid with a lower freezing point.
Fail "safe"...not Fail "keep running"