Board Thread:Support Requests - Getting Technical/@comment-30333252-20150712182622/@comment-303594-20150716074145

Not really. Anything you can run from personal JS can be ran from global.js or just by using the browser's built-in console. The API has permissions built in so obviously you can't delete, block or protect if you aren't an admin.