Is there any way to lock down the proxy settings on a Windows Phone so that they can't be changed by anyone but the person with the password?
To achieve that, you need to choose/use a Mobile Device Management (MDM) solution.
There are some solutions about MDM for Windows Phone / Windows 10 Mobile. Look:
Solutions from other companies: just do a web search for: mdm "windows phone"