Even worse (better?) no sane programmer is going to sign a real-world contract guaranteeing the code is bug-free, and if you trust the wrong programmer to work

Even worse (better?) no sane programmer is going to sign a real-world contract guaranteeing the code is bug-free, and if you trust the wrong programmer to work on your complex blockchain program they might put in a sufficiently complex exploitable code path, and be first in line to (anonymously) exploit it.