Articles and access control

I have a site where I want to allow a content editor to use MIGX on one page and Articles on another page.

It seems that Articles requires more Context permissions to function than MIGX so I put the MIGX page and Articles page in different resource groups and then gave them different resource policies. I tried to combat some of the permissiveness of the context policy required for Articles in the resource group policy for the MIGX page.

I am trying to limit the disruption that the user can cause.

But it seems for Articles to work the user needs to be able to create and delete resources which means he can create other random pages or even delete the Articles resource itself.

Is this how it has to be, or am I missing something?