Use isAllowDelete field to enforce protected roles - Added isAllowDelete to SecurityRole interface - Changed from checking role title to checking isAllowDelete field - More robust and matches SecurityRoleManager approach - Prevents modification of any protected role, not just Everyone - Handles future protected roles automatically