If one is concerned with a very specific and highly unlikely case that two transformers fail with a short between primary and secondary without the melting the wire and breaking the circuit. Than I recommend to add an inline fuse to the wire connecting the two commons. This will still be much cheaper than the relay alternative.
Meanwhile here is the discussion about why perfect isolation is not possible without regrouping the valves so that the two controllers would act as completely separate systems:
