This is more than plain wrong, regardless of the EULA idiocy (there is absolutely no way your average user can be bothered to read a EULA, and they ought to be legally unenforceable, but that is another matter). I’ve a mind to fool around with HFS attributes to check how I can make a directory read-only even to the admin user(s) and post a HOWTO when I have the time.