> 4. System grants admin because it never checks if you are authorized to grant admin

Shipping at the speed of inference for real.