Have you already hidden the delete icon on the "my sites" dashlet? Have you already update the Alfresco\tomcat\alfresco\webapps\alfresco\WEB-INF\classes\alfresco\public-services-security-context.xml file to restrict the permission to the administrator_group?