That can be kept track of. And permissions can be played with. If people want to abuse it, there are appropriate counter measures.