Serious flaw in character abilities - am I doing something wrong?

My group does tabletop RPG, and we recently all moved to different states. We found roll20 and thought at first it'd be the perfect solution to play long-distance. As we were setting up, however, we found a major flaw. We added common attributes like STR, INT, ect. Then we attempted to use the Abilities as hot-buttons for attacks and so forth (clicking Wizard: Attack would automatically calculate damage based on STR, STR mod, and weapon data). So far so good, it works really well. Except one fatal flaw: every character can edit their own stats. Am I missing something here? Am I the only one that thinks the Journal option "Can be edited/controlled by" should be split into two different fields: "Can be edited by" "Can be played by"? This would allow chatting in-character, use of token macros and token movements, but forbid anyone but the GM to edit stats and bio info (we use that field as our inventory).

Personally, I feel that allowing your players to edit their own stats is a must. As a GM you already have enough to worry about with the plot, mechanics, combat, etc.. why bog yourself down with even more things to have to worry about? As long as you have honest players (and if you don't, why are you playing with them?) you should be fine. Make them be responsible for all their own stuff.

I think it would be nice to have the edited/controlled by broken up into 2 separate settings, but I haven't found it to be a problem having it set up the way it is. It does make it easier for your players to be able to make their own abilities, and you just check them instead of you having to do all of that yourself, but i do check stats and such periodically to make sure there is no funny business. At least I did before I redid all my character sheets to be so complex that my players are afraid to break them....now i have to make all the abilities myself again.... :(

As a GM, why in the world would I want to be responsible to leveling up the characters of all of my players? I already deal with all of the stats for all of the NPCs, and in most systems, PCs have even more stuff to deal with.

So far I think this is considered a feature not a flaw of this site. But having the flexibility to reconfigure it would be good, because not all games are the same, you know. I'll join the OP. I have also been curious about the ability to prevent stat editing by players, in a certain type of campaign. Granted not your usual Role-playing campaign with 1 GM and 3-6 players. Playing with people you know to be honest players is great, I'd agree, when you know the players & see the same players returning week to week, in a regular campaign. But I have a different campaign idea that I want to pitch a game where I'm GM'ing, the Characters are pre-set by me, and it would be almost an "open table" kind of game room with a lot of new players coming in & out every week; and the table would accommodate more players than most games. It might be a different player controlling each pre-statted character from week to week. Most stats won't be subject to changing (only Hit Points and equipment/gear could change and as GM, I would be able to handle those changes). For my concept I suppose I can keep the character sheets separately, as in a Text document on my computer, but would lose some of the Roll20 programmed macro ability features that the OP talked about.

Gold: You could create the character macros and give a player permission to see and use that macro.