In fact, the idea of a function "Autoland" ìs not that bad. What can go wrong? Autoland is a routine in a bad weather:
https://www.youtube.com/watch?v=UwCDolQ0e2I
In case the computer receives erroneous data, simple autopilot disconnects and autoland function is disabled.
But when the plane's systems, FAC and FBW are 100% operational and the flight crew do not respond and the trajectory is dubious, then "Autoland" might save the day. ATC could initiate it or by one of the pilots and one of the cabin crew from outside of the cockpit, by entering a known code.
To be clear, only command Autoland is send, then autopilot does its job independently and undisturbed. It's better to command Autoland instead to scramble fighterjets to take down the rogue airplane.
On the other hand, after a bad landing the pilot can say: "We apologize for this autoland, time to time we have to test this function"