[65a]

It is almost always the case that a sufficiently malicious user can find a way to turn that into full blown root access.

[moistbar]

So that means they should get full blown root from the beginning?

[Spivak]

IMHO yes because then you treat the access with the gravity that is required.