But, do people think we should go all the way and implement a whitelist?
I'm don't play on the server (for now?) but I wholeheartedly recommend a whitelist. Griefing can become a severe nuisance over time, specially if it's not noticed immediately. And it can be really disheartening to find out a thing you built got rolled back just because some kid spent an hour or so fudging the server up. Just a simple "DM me in lemmygrad" might dissuade a bunch of people. Also don't allow any non-basic commands for non-admins.