I’m not sure why you still say this when the answer has been provided?
If you create an ‘admin’ category with create/reply permissions only for admin and recategorise your Terms of Service and Privacy Policy topics (and FAQ if desired) into there then doesn’t that solve the immediate issue for you? The published /tos and /privacy pages are based on the topic ids, so will still exist even when the underlying topics are moved to a different category.
Though the issue of having unethical moderators would be a wider problem that you’d have to handle separately.