Limiting edit access to a handful of trusted users and keeping the server patched was enough to keep it from being hacked.