The only way to disable it is to take a hold of it, and put a passcode lock on it (if he knows how to restore, and has access to the computer to do that, he can undo even that effort).
Seriously, the only sure way I can think of to stop him from using it is to take it away.