The scenario you just detailed is rather contrived and is possible in any software deployment scenario. Why the downvotes? As the other comment points out this

The scenario you just detailed is rather contrived and is possible in any software deployment scenario. Why the downvotes? As the other comment points out this is a really stupid security bit to nitpick as all of the alternatives are equally vulnerable in an equally contrivable scenario manner. One way or another privileges have to be granted. They can be granted in one place or another and have largely similar if not identical implications at the very least in terms of the net effect that can be had.