[cflsystems]

You can't restrict development work like this. Whoever is doing this will need FTP and store admin access. Most of the time the store admin access may not be needed or may be needed initially to change store settings/modules but still...
Unless there is a need of direct access to db cPanel access is not needed.
Give the minimum but enough for them to do their work.
And yes you need to trust them...