It's safest to assume at least 1 bad actor is on the team, possibly more. How should that scenario then be handled?

Ethereum devs are also focused on improving how Ethereum "works".

Am I too not in this community? Are you?