Cassie brought to my attention that we need something in the contract saying our editors will not share authors' work. Great idea.
I added this:
Editor agrees not to share the author’s work or distribute work.
It's right at the end. I posted it on the contract page, too.