x2. I would not more have one installed without an arming switch, or lockout switch, whatever you want to call it, than I would drive around with my pendant controller plugged in all the time.
A permanent winch install for me would include a battery kill switch so that the large power cable isn't always live to the winch motor. Any sort of in-cab control would draw it's power from the far side of the switch. One switch, two functions.
I realize that's adding a failure mode to winching, but it removes one from driving. Which do I do more of, and how easily is the switch by-passed if there is a failure?