Neither OT/CRDT nor Paxos/Raft are meant to resist rogue actors. They are not Byzantine fault tolerant.