Maybe experiment with making the extensions directory read-only so they can't be uninstalled, but that might not prevent merely disabling them.

Your situation might actually be a use-case for Firefox Enterprise as and when that comes out. It's likely to cost money though. Assuming they don't make the feature set available for regular Firefox sysadmins for free anyway.