Is a watchdog overkill?

[WhiteHare]

I recently put a TPL5010 on an experimental node, just to have a watchdog that consumes much less current than the atmega328P's watchdog and for that extra level of reliability.  However, I'm not sure it's justified.  The atmega328p and the code base seems solid enough now that I'm not sure a watchdog is even needed.  I suppose the old argument of cosmic rays causing a bit to flip might still hold, but I just haven't seen it on a Moteino.  Anyone here had experiences where they wished they had used a watchdog or are glad that they did?

[perky]

All depends on your application. A cosmic ray event is pretty rare, but a close lightning strike could easily cause an EMP that crashes your mote. If it's an outside sensor and difficult to get at you might want your code to always be in a state that could take OTA upgrades. If you get a watchdog for free you might as well use it IMO.
Mark.

[WhiteHare]

All depends on your application. A cosmic ray event is pretty rare, but a close lightning strike could easily cause an EMP that crashes your mote. If it's an outside sensor and difficult to get at you might want your code to always be in a state that could take OTA upgrades. If you get a watchdog for free you might as well use it IMO.
Mark.

That's the argument in favor of it.  The chip itself doesn't consume much space, but I'm noticing the extra routing to accomodate it starts to cramp things.

[Edit:  Meh, I guess the question is unanswerable.  Even if there's no known reason to have it, there might be unknown reasons.  I'll leave it on.  Like most insurance, one hopes it's never needed.]