What prevents the creditor from signing a transaction that is neither a valid MT nor a GT?
Nothing.
How would the creditor create such a transaction? They need the issuer’s private key, so they can’t create it? Am I misunderstanding the scenario you’re describing? If so could you give a more detailed description?