Read Only Account

We would like to have a read only account.

I was almost able to do this by:
1. Setting up a client "Community"
2. Adding a user "Community Member"
3. Assigning all tasks to the ower company or a developer.

However, the user can change their own password. We want to make this account public account, but give it only view access?

I would also like to be able to hide email and all contact details from this accound.