It's a tradeoff, people have to get stuff done ya know. Proper authentication and authorization controls would have been a better choice.