The least bad tradeoff is pure nakamoto consensus. Everything else devolves to cult-of-personality/politics. Allowing checkpoints at all opens a door that must remain closed.

If reorgs are a problem, the solution is for recipients to demand more confirmations. This is what exchanges do when shitcoins get 51% attacked. The more confirmations you require, the more expensive it is for your attacker to maintain their attack. Attacks can be made arbitrarily expensive simply by waiting.

So there’s already an in-built, PoW preserving mechanism for answering reorg attack shenanigans, without deferring to checkpoint politics: patience.