Yes I think that it is better to be able to set whether user can change widget or not. 
For example you have a 50 users who uses the system and you have some fancy html widgets preconfigured for every user, and you do not want your dumb users to crack some html, because then they will call you and ask to fix it... 
This was the logic behind it and a real life case I am working on right now.