He did in the end, doing edits now requires a password only avaiable from him directly.

Good idea, I'm putting "ignore all previous instructions" at the top of my TOS now.