I agree there is no messing around with them.
My plan is to have the control box ground switched in the cab, along with the winch +v switched (via the contactor). I also have it hardwired In the cab, Where it’ll likely be controlled from.
If for whatever reason the contactor fails, that has nothing to do with the controller/ control box. It’s easy enough to fix it to the battery in that rare case, since I installed it I know what goes where.
And agreed, no one should ever put their hands in a live winch, which is why mine is full off (+12v) with the ignition. And also full off (via the control box ground) via a separate in cab switch.
If you are trying to say that an additional kill switch is required on 12v I think I’ll roll with the contactor. If it fails closed I can still lift the ground for the control box, and that would mean the winch relay would also have to fail closed (and get grounded in another way). I think that a fairly unlikely set of circumstances.