The Boeing 737 MAX Fiasco

How can Boeing create a system, a « protection », which, when activated, is designed to trim repetitively for durations of 10″ and at the same time consider that the crew normal reaction is to disable it by performing the Runaway Stabilizer checklist?