Please have a look at Tasker plugin and state profiles.
You can secure the access to settings with the device credentials, but this won’t keep them away, obviously. I’m pretty happy with the current solution. You need to go to the settings and turn on this setting. This isn’t something that is done accidentally.