Each payslip's password is its own ID number
Switch protection on and each payslip is locked with the ID printed on that page, not the one on the record of the employee it was assigned to. The difference matters: if a page ends up with the wrong person, only the holder of that ID can open it. And if no ID is found on a page, it is not half-saved: it errors and waits in review.

