Someone could do a lot of damage if they got access to the CMS for example and this would help reduce this risk.
Could possibly roll out in stages focusing on the CMS first and then adding to the customer side at a later date.
NB: I have a really good contact that we use for our software development that has experience of implementing this if it would help.