It is both. A secure design would not allow this to happen. But when it does, the perpetrator should be punished severely.