I think I finally have this stupid thing locked down properly. Email confirmations are now required for editing.