That is why the credentials used for that connection are tied to permissions you want it to have. This would exclude the drop table permission.