As long as its your own accounts, you have the ability to remove the user entirely from it. The issue with the scam is the other party was trying to get their user info entered on it, so that they could hold the peripherals hostage.