Give clients a safe, limited editing role: text, images and links only — layout and styling stay locked, enforced server-side.