I try to run things on all my computers with the lowest possible rights, eg I can be root/admin on all my machines but run with those super powers as little of

I try to run things on all my computers with the lowest possible rights, eg I can be root/admin on all my machines but run with those super powers as little of the time as possible to reduce the damage from fumble-fingering something. I could have kept all my deposits as cash on the kitchen table for all the interest that they've been earning. I spent over a decade as a governor of a local school and avoided ever having access to the WiFi, etc, etc. In general it is safest and easiest to manage potentially troublesome rights if you keep those to a small known group. And that's assuming that no one has a latent gambling addiction or whatever.