JD, do you lock the switch in its normal operating position?
It depends. We have gone away from using metal enclosed switches or oil switches on transformer primaries for the last 25 years or so. Now we try to have a circuit breaker on the primary so we can install differential protection so faults will clear faster, which limits equipment damage in addition to lowering the arc flash incident energy (sometimes, depending on the CT location - transformer differential can be installed such that the arc flash incident energy is not meaningfully lowered - differential protection is not a magic solution).
We installed one set of main-tie-main 4160V switches a year or two ago. We purchased 400A load break switches and operate them with the tie normally open. The fault current in this location is such that when the tie is closed none of the equipment is over-dutied from having too much fault current available - in other words it is safe to parallel momentarily so we can do switching without dropping the load.
There are two safety issues here:
1. Keeping electrically-knowledgeable folks from causing unintentional damage by getting a switching procedure out of order, missing a step, using a non-load break disconnecting means to disconnect a load, etc. Kirk keys can serve this purpose.
2. Keeping non-electrical people from tampering with equipment they are not trained to operate and shouldn't be touching. Kirk keys may help here but don't totally address the problem - padlocks are typically used.
We safeguard against #1 this by designing a system that has load break switches, and with any switch combination the short circuit availability is within the ratings of all affected equipment. We do not design intentional safeguarding against dropping the load - that is a local operational decision basically saying we are confident our electricians will follow written switching procedures and not cause any unintentional outages.
We safeguard against #2 by liberally locking substation doors, transformer air terminal chambers, padmounted transformers, switchgear doors, etc. with a "Refinery Electrical" padlock that all electricians have keys for. This way we don't impede emergency access since anyone trained to operate the equipment has the "Refinery Electrical" key. Anyone who doesn't have the key shouldn't operate the equipment even in an emergency because they aren't trained on it and can cause an even bigger emergency if they operate it improperly.
It sounds like you may have both concerns 1 and 2 above - there is a possible unsafe switching arrangement that needs to be addressed, and possibly the switches are in areas that non-electrical personnel could operate them if they are not padlocked in position. We may be able to come up with ideas to help with #1 (other than kirk keys) if you can post a single line of part of the system.