Without trying to debate the particulars, a huge +1 for the concept of allowing ALTER SYSTEM to be disabled. FWIW I would vote the same for control over COPY PROGRAM.
pgsql-hackers by date:
Соглашаюсь с условиями обработки персональных данных