I think there are easy to think of solutions to the problem, that let's everyone win.
The obvious solution, for your hypothetical, would be to give a setting to the user, that turns on "safe mode" and make this setting only changeable on factory reset.
So any user could choose, at startup, to have safe mode on or off, on their own device.
The obvious solution, for your hypothetical, would be to give a setting to the user, that turns on "safe mode" and make this setting only changeable on factory reset.
So any user could choose, at startup, to have safe mode on or off, on their own device.
Problem solved.