Is the concern that the transmitter can store energy and release it as high power through the sensor probe? If so, how is that possible? Can someone explain how a fault at the transmitter that is downstream of an ISB can deliver unsafe power to the probe?
The IS system deals with stored energy as well as instantaneous power.
The barrier will limit what the transmitter can put into the sensor leads if a fault occurs in the sensor or the wiring to it. As long as the transmitter cannot store energy.
If the transmitter can store energy, it can take in power slowly through the barrier and release it all at once into the sensor if there is a fault. That is why equipment which can store energy has to be IS in design or else have a barrier on its sensor input, if the sensor is in a hazardous area or on the transmitter output if that runs through a hazardous area.
Just a barrier on the power input to the transmitter is not good enough.
Think of a 200 pound weight, which is raised to 20 feet in the air over the course of two hours by a very low power, geared down DC motor. Let's assume that there is not enough power in the DC supply circuit to hurt anyone. But what happens if you are standing under the weight when the hoist cable breaks?