To prevent WordPress users from making changes to plugin and theme files, you need to create an additional entry in the wp-config.php of your website.
You don't have to make this change manually, however. You can activate the disallow file edit function directly in your Box. Simply follow these steps:
Click on the Settings tab in your Box overview.
Go to the Security list on the left
Select the option Disallow File Edit
If you activate this option, you disable plugin and theme files changes from being made via the WordPress code editor. In this way, you can prevent users from making any changes you don't want.
This setting also provides more security. It stops, for example, user accounts created by hackers from changing the theme and plugin files of your website.
⚠️ Note: Check your website after activating this function. Certain plugins may sometimes no longer function correctly with this option turned on.