You can't have a functioning society/civilization without giving some entities power: much like root privileges or ROP gadgets, anything designed for good can be abused in the hands of malicious parties.
There is no in-band method to prevent[0] subversion- no one can design an instruction set, security scheme or laws that are immune from subversion.
0. Except the evil-bit header in IPv4. Routing equipment always drop evil packets before they reach the victims network, stopping attacks before they happen.