Our current view of the moderator permission is that it should have the ability to do everything because this makes it much faster and easier to approve things in a stream. Until we add lower level permissions, I would recommend you simply avoid promoting any users to moderator who you don't have full trust in.
Caption this Meme
