I've removed the themes jar from the server distribution and at the same time made all built-in theme resources read-only so users don't edit them by mistake. I've also removed from unused files from the common resources for themes (files for third party libraries).