They cannot edit the iFrame itself. The user is allowed to edit the contents within the iFrame.