Disable MacOS Password Change via Terminal?

Is there a way to disable the ability to change a macOS password using the Terminal window as part of putting the Mac in ‘Recovery’ mode?

This is a “frightening” capability, because it allows “anyone” (who knows how to do this) to break into any Mac! All someone would need to do is use this ‘feature’ to change the password (on any Mac), then just log in using the new password they created!

Granted, Keychain information may be disabled, but it still allows someone to see all of the contents (for the affected user account) on the computer - even if the ‘legitimate’ user has turned on FileVault.

For those people that want to put more confidential / personal information on their Mac, this is a huge risk.