Installing Open Firmware password will at least prevent the previous gaping hole: Start up with the 's' key pressed and go straight into single (root) user mode. It also prevents the CD-boot ...