Hi,
Oracle Visual Builder studio is connected to non-prod Oracle FA instance. In non-prod FA instance any developer can assign Application Administrator (ORA_FND_APPLICATION_ADMINISTRATOR_JOB) role to him/herself. This will give un-controlled access to any VBS project.
They can change the project control properties
In such How to restrict VBS project access?
@adam-blaine-oracle