Okay, if you give a user access to the proxmox panel, he obviously can change all settings he has access too.
Including if you give him permissions to the disk settings, which you need for the boot order.
Means, he can remove the I/O limits, you set, to prevent abuse or limit abuse on a host...