I haven't used this plugin, but I was looking through the code, and it seems like players would be able to use the various sc.* console commands while viewing a player vending machine even with allowPlayerVendingMachines: false since you aren't checking that specifically. I don't recall if opening the console closes the vending machine like it closes player inventory, but players could still work around that by using a key bind.

I didnt consider keybindings, if it's possible I'll add another check, thanks