It is true that you cannot prevent the passwords from being changed, but you can start the recovery of the account.

Fortunately, not all community administrators act this way. And certainly there are currently options to prevent this, as you mention.