Shouldn’t this also prevent self-destruction?

If a cracker already has a permanent route to root installed in a Linux system and their vulnerability has just been discovered, they might killswitch the killswitch like this to prevent the sysadmins from disabling that entrance-route until they can find/install another way in.