If you disable outgoing calls in the mclass and eclass then you don't have to worry about hackers dialing in. If you do need those options, then you can create a separate class and put said extension or mbx to that class. Just don't allow international or long distance if it isn't needed.
