Hi Geoff,
Thank you for responding - unfortunately I did think of this, but they were never assigned to a front page role (I checked again in case).
However, I did check capabilities for the role again and have now prevented them in capability moodle/course:update (update course settings). They can still update course settings for courses they are enrolled on, just not the front page.
Hooray!