The jailbreak already mounts the userstore as "exec", yes? Just set it as "sys_immutable" as well. Then the backDoorLock can mark a directory with ATTR_SYS. (Is there any common utility that can set these vfat flags?

)
Of course, Amazon is just going to read this thread and "fix" that too.