> They can super-lock domains so that if someone manages to change the root servers, they can instantly change it back unless a processes that you define is followed.

If you're referring to registry lock, that's not exactly how it works. It prevents said changes in the first place rather than merely reverting them; all changes have to go through an enhanced, manually verified, known-human-to-known-human change process. This is what e.g. google.com uses.