The only other (painfull) suggestion would be to manage all the code that uses the linked server eg tie it down into stored procedures etc, and ensure it only does selects.

Maybe you would also have to consider using openrowset rather than linked servers to ensure noone else uses the connection.

Personally I'd try and see if there is any way to tie down the security at the other end.