In my estimation, if their system was decently designed, instead of granting anyone access to everything, nobody should have been granted access to anything if there is an authentication problem. Can you possibly imagine a worse system than they currently use (that still attempts to provide security)?