make it impossible to disable paranoia via database

It would be nice to prevent someone from disabling paranoia via the database. In an ideal world this would just be a variable $conf['modules_enabled']['paranoia']; in settings.php.

For d8 this is apparently possible according to EclipseGC:

you’ll need to provide your own ModuleHandler() and override the install() uninstall() methods
which should be pretty easy, cause the $module_list is passed to them, so you’ll just do something like “check $module_list that was passed to me against the black/white lists, remove/add do $module_list as necessary, call parent”
probably override a number of other methods (like loadAll()) so that your lists are respected
but I’ll bet 90% of the effort is in a subclass of ModuleHandler