Yea. Personally if you lock down the TS enough to the point where users can't write any files to it, then I wouldn't worry about it. That's the standard practice usually.

Also, no admin rights, the usual.