IMO, the changes should not be on the protocol, but on the team that write the core nodes. In fact, only a few of core devs control the git hub, this means if these people are compromised, then the whole bitcoin project is down. They must get enough protection
Gavin also said that it is difficult to reach consensus between core devs. Since the decision of a protocol change is seldom a technical but a political one, they really need some kind of transparent decision making mechanism
In fact, infrastructure wise the bitcoin has many area to improve to become a truly trusted world currency, there are so many uncertainties in its security model. Today, people just download a software and pray for the rest part, but when a retirement fund wants to put billions of dollar in this currency for 20 years, the bitcoin network is still not enough robust in many aspects. The risk of ruin is still larger than our financial system today
Phew... sophisticated input this early in the morning. Yeah that's one of the real problems. Core devs could be compromised, etc. But I think it's more probable that they don't earn enough for their work on the code and therefore leave. I think maybe... a voting system for which fork to use or which pull requests to implement maybe? Of course PoW-based!