Sounds like you haven't wrapped your head around the basics of smart contracts.
Yes, a blockchain gives you an (ideally) immutable foundation. No, that doesn't mean that every transaction that invokes a smart contract has to be immutable. If a smart contract for a particular use case needs to have the ability to "backtrack", so it can, there's nothing stopping it.
The problem with exploitable systems is that the 0.00001% is not random. It's not like a random 1 in a million transactions is dropped.
I think the bigger issue is that the system is somewhat arbitrarily controlled by the large players. That could work out well in some cases (funds hacked are returned) but it could also be less optimal (e.g. you're thrown on some list and all of a sudden your transactions are not valid). We've already seen hackers and obviously malicious actors dinged, which is good. But this opens up an avenue for things like forcing participants to go through regular banking protocols that starts to affect more and more people (e.g. political dissidents). By then you just recreated the modern financial system with all its flaws and gatekeepers, except its less efficient.