One way to prevent this is to create an extra guest profile with help from SwitchMe:
Get root, install SwitchMe, create an guest profile, protect your profile with an password and enable SwitchMe's login manager feature. This allows you to recoveryrecover the tablet by rebooting into your profile and resetting or deleting the guest profile.
Note that SwitchMe may not work with your ROM.