One way to prevent rogue clients from overwriting your metadata or contact lists is for clients to keep them stored locally and not just replace the local copy with whatever they get from relays, but prompt first.