In EOS, smart contracts can be updated by the account owner.
This could be a problem for certain applications in finance. For instance, if I want to deploy a token, the transfer function should be non-updatable. And in general, I want, as a developer, that the entire smart contract cannot be updated to guarantee reliability. So, users have to trust the smart contract only and not also the developer, hoping that updates are not malicious.
Is there a solution for this?