Probably a long shot out asking as we have a lot of automations baked in outside of the tool that break if a user does this.
It seems like anyone with Contribute or Manage access to the project can copy it, meaning if they can complete task they could theoretically do this.
I haven't been able to find anything in Preferences that can turn this on/off.
Is that correct?