What equally stops someone from simply logging in using those account details, deleting all the files, or simply changing the password? Feels like whack-a-mole

What equally stops someone from simply logging in using those account details, deleting all the files, or simply changing the password? Feels like whack-a-mole to me.