Who can send Tez from Smart Contract

Suppose I have a wallet “Alice” that originates a smart contract and send 10 Tez to the account of that Smart Contract.

  • Who can send those 10 Tez from the Smart Contract’s account somewhere else? (Probably Alice, but where is that stored?)
  • Can the owner (e.g. the one that can send those token) be changed?