Remit-To address was updated by the Suppliers form; how can we prevent this?

We have a user who has access only to the Suppliers form. The user went into the form and added a new supplier and site. Our Receivables Remit-To address was over-written by the new supplier site address! Obviously, we can't have our Remit-To address changing randomly. We do have an SR but no progress so far.

Has this happened to anyone else? Did you find a solution? Do you have any ideas how this could have happened? We are on 12.2.5. I will post a similar question in the AP forum.

Here's what we know:

User has access only to the Supplier form, no access to Remit-To form