but the FMCs do not accept commands unless the cockpit crew choose to accept it. ie route loading, atc clearances etc.
What stops them from accepting commands without FC confirmation? Their software. Think about it.
Stuxnet was designed to spin Iran's centrifuges overspeed (uncommanded) while presenting normal reading to the plant operators.