Earlier quoted context omitted.
Our solution to that age old problem is to scope each new feature into its independent "app", which is sandboxed and walled off from the main source code
Built something like this, but mostly just read-only. Handling writes seemed harder (and a maintenance issue), so we didn't.
Giving non-technical users the freedom to create new backend objects is definitely scary and not worth it imo!
What did you build, any links?