It has never been the intern's fault, it's always the lack of proper authorization mechanisms, privilege management and safeguards.