How to restrict Organization Administrator membership in Visual builder studio

In the context of extending FA Cloud with VBS, any user with IT Security role in any environment can assign himself one of the following roles:

Application Administrator
Sales Administrator
Customer Relationship Management Application Administrator
Synchronization Enabled Administrator Identity
Human Capital Management Application Administrator
Application Developer
Synchronization Enabled Developer Identity

By doing that, this user has now all the privileges of an "Organization Administrator" (What Are Project Memberships?)

Is there a way to avoid that?