However there are a couple failure modes where the battery won't limit the voltage:
1) If you don't do maintainence on the battery for several years (or several months if the dump load fails or is insufficient) the battery may boil dry. This can escalate destruction of your battery bank into destruction of your inverter, too.
2) If you unhook the battery, the wiring to it fails, or the fusable link blows.
You beat number 2) by making sure to not unhook your battery without first furling and shorting the mill, and by doing your cabling to minimize single points of failure. For instance: Separate input and output cables with separate fusable links, joining at the battery terminal, if you're using lug-under-screw connections. Or paralleled strings with the cabling going from each string to a junction point, so you can unhook the batteries in some strings without unhooking them all.
Overvoltage protectors (varistors) are also a possibility for small mills. But they're intended for short-term service and may fail after a bit if actually triggered. So they're good for covering a momentary "oops" but shouldn't be counted on for long-term service (like swapping batteries with the mill live).