That being said, nothing wrong with monitoring from Loxone, you just have the safety back up.
The bit I was referring to (but couldn't remember detail) was the non-self resetting cut out.this should come with the cylinder.
The way mine is set up is Loxone relay to the cylinder stat box, power then comes from this (via it's internal relay) to the 2-port valve. So If Loxone has hot water demand AND the cylinder is below the safety limit power will flow to the 2-port. If either of these are negative then no extra heat from the boiler.
The 2nd part is the temp safety valve that will run to the tundish (black plastic cone with opening) if it senses cylinder is too hot it dumps a load of hot water thereby causing an inrush of cold water which lowers the overall temp.
Not sure how Loxone could satisfy non-self resetting but I guess it's only a guide. I like things like this to be easy for building control to understand!