Lock plugin installation, prevent theme switching, and restrict sensitive admin changes in WordPress.