True that there's nothing terrible they can do when it's just statistics. The obvious solution would be to remove the global variables altogether, so that each user only has their own (from which the global versions are calculated).

That way, if the user was to do stupid things to their own variables, they could just be removed when calculating the global ones.