From the rsync man:
--remove-source-files
This tells rsync to remove from the sending side the files (meaning non-directories) that are a part of the transfer and have been successfully duplicated on the receiving side.
So it seems that a file is deleted on the source side only if it is marked as successfully transferred by rsync.
In my experience Rsync seems to be very friendly with being killed, when this happens I just run the same command and rsync is everytime able to start where he left without any side effect.
The only problem I can find to rerun a killed rsync command with your options is the --append one. I advise you to read the --append and the --append-verify sections of the manual and consider a check for the consistency of the files on the receiving side.