Yip I am struggling to see where the security risk is. If the policies are still applied server side(I am assuming this is the case since they did not demo serv

Yip I am struggling to see where the security risk is. If the policies are still applied server side(I am assuming this is the case since they did not demo server side vulnerabilities). Then all you are doing is getting to a part of the UI that has no functionality. The same can be done with many other UI's by editing the local configuration.