Vertical stability of ITER plasmas with 3D passive structures and a double-loop control system