There is a difference between not bringing in additional security and bringing anti-security. In my eyes, you are doing the latter.
Your default examples elevate privilege, not warning the user about this fact anywhere.
Your default examples elevate privilege, not warning the user about this fact anywhere.