> Well, for one thing, inserting into pg_catalog tables without DDLs should require privilege and be audited. It does require privileges. > Secondly, things l

> Well, for one thing, inserting into pg_catalog tables without DDLs should require privilege and be audited. It does require privileges. > Secondly, things like lo_export() should be disabled by default. It's superuser only.