Add two step verification at log-in for users with permissions to change things (i.e. those that can change data sets/pages etc).
Maybe it could be an option even for those that have permission to browse data sets that are not public.
This way, those who are concerned about security will feel a bit at ease.