Actually, you can do covenants, using PIPEs (Polynomial Inner Product Encryption), ColliderScript, and a handful of other methods. Soft forks would be more streamlined and trustless, and in the case of ColliderScript, a LOT cheaper.