The integrated DSP function is a facility. How you use it is the matter here. You say "if an error occurs," why does it occur, why there isn't a routine to avoid that to happen or if it happens to avoid the volume to go to max? It is standard in software driven devices to cater for errors. Topping haven't done that. At worst you should have a very short pop but that should be all. This is why I placed a passive volume control in between my Topping and power amp. Because I do not trust a small Chinese company to be able to write capable software to protect what is happening.
I try to make that clear all the time.
You can't catch it with programming or any other firmware. This is not possible in the constellation we are talking about in this thread.
If an error occurs, the part of the software that is supposed to prevent the registers of the DAC chip from being reset and thus being at 0dB is also disabled.
The problem is and remains that the starting point in the DAC chip is always 0dB. That's hardwired and a fact.
One possibility would be an intervention after the DAC chip, e.g. a switch-off that must be actively enabled by the user, or an adjustable maximum volume (better both).
The manufacturers should leave this function out of their devices (I mean exclusively the volume reduction in the DAC chip) or inform the buyer in detail and explicitly about the dangers of this function.
If I were the manufacturer and put a device with this function on the market, the owner would have to report to the website with a code generated by the device, register with an e-mail address and serial number and activate the function in the device with a code (received after confirmation of the waiver statement).
After that, I wouldn't care if the owner grilled their speakers or the amp.