Hej Per,
Really, the only trustworthy solution is this:
This solution is
conforming to standards EN 954-1 category 1 and IEC/EN 61508 capacity SIL1, stopping category 0 in accordance with standard IEC/EN 60204-1. This is the absolute safest way of making sure you are not getting injured because of unintentional spindle rotation. The switch should of course never be used for on/off control of the spindle, it should be operated only when the spindle is stopped. If the spindle relay would for any reason be activated while the safety switch is in off position the spindle will never start rotating and you are safe. The VFD may or may not get damaged, but that is of secondary importance in this case, personal safety comes first.
If you use the main switch as safety switch when you change tools you will be
conforming to standards ISO13849 category 1 and IEC/EN 61508 capacity SIL1, stopping category 0 in accordance with standard IEC/EN 60204-1, which is also good, but it has the disadvantage of pretty long waiting time before you can regard the spindle "safe to touch" and after, when you want to start the spindle. If a Run command is executed while the main circuit breaker between the drive and the motor is still open, there may be residual voltage at the output of the drive and the spindle may still spin up for a short while. Different VFDs have different capacitor discharging times and different VFDs behave differently, but generally you should wait until about a minute or even more before the spindle is safe to touch at the tool end. Starting up is also time consuming since even here it takes several seconds, depending on the VFD. Also, frequently switching the mains on and off may shorten the life of your VFD. Excessively frequent starting and stopping will shorten the life time of DC-bus capacitors, and may destroy the resistor for capacitor charging and current limitation. The recommendation for my VFD (Bosch Rexroth EFC5610) is to wait 15 minutes between, so following that would be pretty painful.
I change tools often and many of work passes takes only about 2-3 minutes, so using the mains switch as safety is out of the question for me. On the other hand, I would NEVER trust any software/firmware/hardware when I have my hands on or near the tool which is why I implemented this safety switch. It is a very cheap life insurance, but it is not automatic and demands some discipline from my side, but that's OK. Even if the bug gets fixed, you never know what may cause a momentary spindle relay activation when you set the tool length, use auto zero, center finding or any other routines with your hands near or on the tool.
I am using the UC300ETH now, though have not really used it for any work yet, and I can't really use UCCNC, but I have seen some times the relay kicking in for a very brief moment. This happens only during startup so far, but there is no way I trust any firmware controlled relays for such critical function, so the safety switch is off when I have my hands in a danger area. I used the UC300USB before and some times it lost contact with the PC (Mach3 not UCCNC) and in that case the spindle just kept spinning even though the motion is stopped, which is also not very good, but I have never heard any relay clicking during probing or any other activity. Note that I had a safety switch even with that and my DC spindle I used before.