Solution: Pay the miners, reject non upgraded blocks

Miners are paid security, not network owners.

Any can spend is only applicable for nodes that don't use the segwit code, but then we've correctly identified the "problem" and the ultimate decision makers. Users. Users who run nodes.