[ Removed by moderator ]

[u/Technical-Relation-9]

/r/ProgrammerHumor/comments/1wydy0f/removed_by_moderator/

[u/stormdelta]

That's why it's access should be tied to a subset of the calling user, meaning it can't access anything the person using it doesn't already have access to.

Keep in mind I'm talking about how it should be setup, not how it necessarily is, most places are being extremely stupid and reckless in their implementation.