Revert that, removing the guard means we also go into confirm_sender_death even if we have unmonitored already - which means we must have done so due to sender_death. So that's definitely extra work, and I'm not sure it's even correct.
Move the peer_down handling to sender_death, since that's when the slave really gives up on a sender.