[moring]

Ideally, the permission list is meant for curators which end-users trust and can rely on.

Also, historically, permission lists have been fine-grained but too coarse at the same time, meaning they were "fine" in the wrong way, based on what is easy to implement instead of what the user needs.

[Gigachad]

Most of the recent compromises have been from trusted people who had their accounts compromised. So just picking someone you trust doesn’t work out.