Ethereum makes no such guarantee after the introduction of delegatecall, where it's possible to replace one smart contract implementation with another.
True. I'm curious what this sort of hit replacement would look like in practice. But, you can't add it in after the fact, so you at least have the option of writing contracts that give you the formal guarantee.
