In recent Toyota vehicles the pedal isn't connected to the throttle--it's drive by wire. In theory the computer could continue accelerating regardless of the gas pedal's position.
You also toggle bits in your code. One in the main loop, another in any interrupt service routine that you are dependent upon. These bits then go to a GPIO so that the GPIO toggles. If the ISR freezes or the main loop freezes, the GPIO quits toggling. You then have an hardware, RC-Diode type circuit, that stays high if it's input toggles, but goes low, if it's input goes low and stays low, or goes high and stays high. The output of this circuit drives a relay, so that if the CPU quits toggling the GPIO, the relay clicks off. The output of that relay is a dead-man's switch that powers down the vehicle. The end result is a hardware fail-safe if the CPU misbehaves. There are other tests to confirm that the relay isn't frozen, that the RC-Diode circuit isn't frozen, etc.
So, in theory, if a high-school sophomore designed the vehicle, you might have a problem. Otherwise, I think you don't give the engineers that design these systems enough credit.
"Well, I have many models of Prius that got recalled, but I have a new model that didn't get recalled. This new model has an accelerator that goes wild, but only under certain conditions of cruise control. And I can repeat it over and over and over again--safely."
"This is software. It's not a bad accelerator pedal. It's very scary, but luckily for me, I can hit the brakes," he said.
-- Steve Wozniak
More suspect, in my opinion, is that in a cruise control, you have a feedback system, based on car speed. The car speed is almost certainly redundantly sensed, so that's no worries, but the feedback loop itself could potentially go oscillatory if there were other variables introduced that hadn't been designed for. Those variables could be pretty subtle. For example, maybe the gear motor that you use to mechanically control the engine gets sourced from another distributor, and they give you a better one, that has more torque. Perhaps that throws off the stability analysis that you had done. Tons of things could change somewhere between the 500K's car and 1M's car you produced, lots of different vendors and permutations could come into play that could throw off the stability of a cruise control, I would think.
EDIT: They're probably using feedback in the control motors as well (servos), so that's a non-realistic example, but it illustrates the problem.
Brain-dead cruise control behavior is nothing new. My '92 Porsche 968 would cheerfully redline the engine if you disengaged the clutch with cruise active.
I'm not sure if automotive systems are held to any certification standards. Maybe someone working in this field could answer that?
Unfortunately, this is probably considerably more dangerous than driving while on your cellphone.
Most of the other actions suggested can be taken while in standard driving posture. Those will be much safer than reaching for fuses under the dash.
In any case, I was just throwing out an idea.
The ignition switch would have to lock or otherwise malfunction
The shift lever or clutch or automatic shift lever would have to malfunction
The brakes would have to overheat (does not really happen much in a production car). It is not 100% true that brakes will always overpower the engine, but the cases in which they don't are the ones with massive 700hp engines with big 'ol turbos and stock drum brakes, and in that situation it's the owner's responsibility.
There would also have to be no runaway truck exits.
If you were creative and knew something about cars, you could pull one of many fuses from the fuse box. On cars I've serviced, the computer fuse is always in the driver kick panel, so just rip off that panel and start yanking fuses while watching the road.
It should be noted that the e-brake on fwd cars is not your best choice (though still a decent choice); while a locked up wheel provides drag, it does not apply as much drag as a rolling wheel with maximum braking (which can easily be obtained cause of ABS). Also at extreme speeds you run the risk of a spin, which puts you possibly at risk for a roll.