Yea the anchor has full function access like a foreign controller. If you wanted to add an anchor they could change things but those same changes would need to be placed on the inside (foreign controller). When you anchor the wlans need to match on both anchor and foreign so they would need access to both.
Another way you can drop the network interface on an controller and let them have full access to it ..
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
___________________________________________________________