But i would like to protect my .drone.yml from being change from anyone else but me, how do i achieve that now since current security policy that would protect it only from pull requests.
Could it be extended like some option in admin panel that allows selecting list of people that can actually do changes over to .drone.yml, if someone else changes it to disable drone from running until approval from listed.
Gated builds are exactly what you want to enable. You can enable that within the drone repo settings. If somebody changes your drone config you have to accept or decline this build, until one of that happened the build is in a pending state.