I'm not sure why you're sorry - that is what I, and others, have been saying since the very start of this discussion (unless the perceived 'safety issue' is that, without a cylinder stat, the temperature of the DHW would probably be higher than if it were thermostatically controlled).Sorry but I don't see where there is a safety issue if no cylinder stat is present.
Kind Regards, John