We're currently supposed to set our .prg's as read only when were done programming them but half the time we forget. This has caused some issues with unintentionally modified programs over the years (the machinists operate the CMM's here).
I'm thinking either a script that can be run once a day/week/etc, and will check all those boxes in our program folder, or a subroutine at the end of each program that will that that particular file as read only (but knowing the file name would have to be automated somehow).
And yes, despite many raised eyebrows at Hexagon, we run thousands of programs as read only and we run them off a server (not a local drive) across 11 different CMM's with no substantial issues.
