How does the architecture prevent someone taking over by running a several billion clients?
The majority needs to be trusted, but not weighted by their number of software instances, but by either computational power or economic power, depending on the context.

The main technical assumption is that the majority of hashrate is not trying to attack the network. So an attacker would need to purchase and operate more hashrate than the rest of the network combined; this isn't easy.