> A good language for maintaining state machines would provide features for upgrading the security of a live contract.

This actually exists, if you code for it. You can make your contract call out to functions in other contracts, and repoint if you need to upgrade.

But that means your users have to trust you not to abuse the power, so it's a tradeoff.