Why an External WatchDog Timer?

An external watchdog timer cannot be disabled
An external watchdog timer cannot be cleared by a single errant instruction
In short, I found the controller frequently hung using only software watchdog timer, but I’ve never seen the controller hung with external watchdog timer