Another idea would be to put a mechanical timer in the heating element circuit that requires the operator to rotate the dial to power the element for a specific period.

It will not stop a situation where there is a leak that drains the fluid below the element level but it will require the operator to be there to initialise any power to the element.
George