The pallet-contracts should have functionality that enables sudo/governance to force-overwrite the contract code of a particular AccountId. AFAIK this is not a simple set_storage(account_id, new_code), but more involved.

There will eventually be some mishap with a contract on some chain, we'll have to introduce this sooner or later anyway.