Hi Tina
I tried locking a custom field and this didn't have any effect on whether the field was able to be added to an HR Import.
Anyone who has the permissions to create and run HR Import is able to change user data so theoretically would be trusted not to change data that they shouldn't.
Cheers