But freezing is a local state, that shouldn't need more than auditing ? The control loop "freezed -> unfreeze" should maybe not be exposed for action if it has such consequences.

God forbid you hire someone to do it locally!

...or just have them beep if there is an issue.