User16764241763
Databricks Employee
Databricks Employee

Hello @Bas Toeter​ 

You could enable double encryption on DBFS root storage account

https://docs.microsoft.com/en-us/azure/databricks/security/keys/double-encryption

There are Deny assignments that prevent any changes to the storage account.