Yes...

Don't give the client permissions to the SQL server.  Make sure the SA account is secured. 

Also, put all of your SQL user access info in compiled COM objects or...