You can certainly lock the system down with custom permissions/roles if you don't want people doing things you don't want