Comment by JoshTriplett

Either the gate needs to be unremovable, or the model needs to have sufficiently limited power that its alignment failure does less harm.