In this scenario a deployed smart contract should have and retain full control of the funds (excluding BPs of course) on the account. How can one stop transfers from an account by the account owner?
Also deployment of a new version of a smart contract needs to be disabled. Otherwise the owner of the account can add functionality to, e.g., give him/herself access to all funds.