Your setup adds some protection, but Access security is weak against experienced users. Disabling Shift key helps, but it can be re-enabled. Password-protecting the backend and VBA module adds layers, but both can be bypassed.
To improve security, convert the frontend to ACCDE, move the backend...