I realized that user:<anyone>/monobook.js pages don't have any kind of protection. I think it should be protected by default for others then exact user. Is it possible? I think that you can realize how can it be used by some intelligent vandals.