Disable field editing to keep single source of truth in CRM as native sync from Hubspot or Salesforce for example are only one way batches. So if a user edits a contact field this wont be reflected in hubspot and when the next batch syncs, their changes are lost. HUGE data quality problem for customers.
Secondly, disable actions as a one time action triggered in a rule. This will solve a lot of security issues. For example, when an email is tagged as "malicious", disable the ability for a user to reply. Jack is working with a customer using "defender" intergation with microsoft that triages malcious emails and removes them from users inbox as a way to prevent people replying which we apparently cant replicate in Front, but this is another workaround.