Am I right in thinking that editor restrictions right now are mostly client side? I've looked through the code and most of the restrictions seem client-sided, but there's obviously things I could be missing. If this is the case, is there any plans to verify these restrictions on the server side?
The alpha testing group probably mostly consists of those who are at least experts or well-versed in using web technology and quick learners. @13.'s suggestion is probably more aligned with how I see normal users using it.