This has crept far away from "can I upgrade by W2K3/E2K7SP1 box to W2K8.
Having an RODC in your mix is going to help your admins not delete things but only if you take away their Domain Admin rights. If someone is a DA they will be able to screw you over whatever you do operating system wise.
The only way to fix this is to properly delegate permissions. The people out on the campus's shouldn't have the rights to do what they did in the first place. If people cannot be trusted not to be ultra careful in ADU&C they shouldn't be DA's.
In summary you've drifted well wide of the original point. Deploy your DCs as 2008 if you want. Deploy RODCs if you want (remember though, Exchange won't use them so keep them in different AD sites) but really, fix your administration model. "There are seldom good technological solutions for behavioural problems" (Ed Crowley)