Yes that's an obvious fundamental limitation of the entire design - it isn't remotely fail safe. You can't really fix that. You can reduce the chances of failure with redundant hardware and formal verification of the software.
It's not at all clear what the actual problem is here but in this thread we were discussing writing bug free software.