[bdd8f1df777b]

That's extremely dangerous. Any software running as a wheel user can escalate privileges willy nilly.

[immibis]

they can also access your ssh private keys

[rascul]

In theory, those ssh private keys are password protected.

In practice, maybe not.

[ec109685]

They were stored in the user’s yubikeys (or similar) in this example.