diff --git a/modules/system/twig/SecurityPolicy.php b/modules/system/twig/SecurityPolicy.php
index aacd39ba6..b06601e8f 100644
--- a/modules/system/twig/SecurityPolicy.php
+++ b/modules/system/twig/SecurityPolicy.php
@@ -18,10 +18,18 @@ final class SecurityPolicy implements SecurityPolicyInterface
      * @var array List of forbidden methods.
      */
     protected $blockedMethods = [
+        // \October\Rain\Extension\ExtendableTrait
         'addDynamicMethod',
         'addDynamicProperty',
+
+        // \October\Rain\Support\Traits\Emitter
         'bindEvent',
         'bindEventOnce',
+
+        // Eloquent & Halcyon data modification
+        'insert',
+        'update',
+        'delete',
     ];
 
     /**