> You don't have to allow all users everything, but you should allow those who want, to do as they please.

Perhaps. Perhaps that should also mean there are consequences to their actions and they get disconnected from shared systems.