By design, they will always remain unable to directly affect the 1st layer. This is an important safety feature for the first layer. But it will always be possible to "port" proven, desirable functionality from the 2nd layer to the 1st layer. And a 1st and 2nd layer account can be "linked" via a common private key.