Ah, sorry, didn't notice there was a separate contract at the bottom. Constructor is only called once when the contract is deployed and it can't be called by anyone after that. So the contract is safe at least in that respect