Yes, I don’t think this can ever be solved completely. Humans in principle have the same problem. For example, a translator may have an epiphany reading the text to be translated, and quit the job. Same for an employee reading some email (or anyone reading social media ;)).

You can add a watchdog AI, but in general they’ll have to understand the input as well to judge the behavior correctly, and who watches the watchers?