Exactly, you just won 10 points! :)
Well, I tried Leopard (10.5.4) and in Leopard you are able to restrict wireless-changes to administrators only. Can't remember the name of the option but I'm pretty sure it was somewhere under `security' or `network'.
Solved for 10.5, no solution for 10.4.