The possibility of an off switch that can't be manipulated in AGI systems is a research question. It's necessary to have a suspend to disk switch to save the system to disk rather than killing it.