Invite them by email with Standard access, not Admin. Standard can run every campaign but cannot give anyone real access, change access levels or accept a manager account link, so control stays with you. Keep at least two Admin logins of your own, and if they link a manager account, accept it and leave Owner set to No.
Switch each campaign's Location options from Presence or interest to Presence, so the ads go to people Google places in or regularly in your area. Then match the location list to the cities or zip codes you serve, nothing bigger. Exclude any place that keeps showing up. The settings belong to each campaign, so repeat it for every one.
Open Campaigns, then Insights and reports, then Search terms to see what people typed before your ad appeared. Tick the wrong ones and click Add as negative keyword. Google adds each as an exact match, which blocks only that one search, so cut it down to the word that makes it wrong.
Use the Ad preview and diagnosis tool under Tools, not a Google search. Type the search a customer would use, set the location to a town you serve, and the tool shows the results page or the reason your ad is missing. Googling your own ad adds impressions without clicks, and Google may stop showing it to you.
Open Campaigns, then Change history. Changes from the last two years are listed with who made them and when. An email address is a person, "Google Ads API" or a tool name is software, and "Google Ads system" is Google. Most changes from the last 30 days have an Undo link.