You must have a write ACL on the table, you can just update the condition in the ACL.
Condition can be something as :
State is not one of Closed, Cancelled, incomplete.
This will prevent your record to be updated from anywhere, even list layouts, client side approaches will not help prevent dat manipulation from lists.
For reference you can check Incident OOB ACL:
