It may be obvious by this point that I intend to use Firebird to serve data
on a website.

If this were on an ISP the database would have to be accessible from tcp/ip
so that people could maintain their databases. Unfortunately only "real"
data is protected by roles etc, anyone may look at each other's meta-data
and take a copy of triggers etc etc (I presume add tables too ?).

Is there a way to stop this ? If not, is there a plan to implement a way to
stop this ?

Pete