I had a look around and I can only guess that the extensive hard limits that they document in their design fulfil the safety requirements on their own.