Right, there is a risk that that could happen. I would recommend leveraging the Spaces & Security features to only give access to creating index patterns to the proper users. That way, only admins can potentially do this + if a bad index pattern does get created, it's isolated to a single space.