The golden rule is, just don’t change it. The maintainers are the biggest threat, just pacify them. Like you say, take the humans out. Any change to the ruleset is an attack on #bitcoin. And it’s not an app, so the whole thing on security upgrades is a red herring. It’s a ruleset visible to all. No changes required. V25 is maybe the optimal. If everyone runs that or below, everything’s fine. #Bip110 is necessary to undo the malware. After that, just leave the code alone.