I think you can corrigibilitymaxx and still prevent catastrophic misuse via system level measures and deployment controls. In particular, we can restrict who has full access to the model's inputs

Who is "we"? And if this "we" has control over a corrigible AGI/ASI, what prevents them from doing terrible things?