This is really, really not enough to guard against serious abuse issues. At the bare minimum, you also have to clear interactions or include versioning, and even that's not enough. I'm begging you, email me, I will redteam this for you, there are SO MANY invisible abuse cases