Comment by scoot

So it gives a services any privilege it asks for? I haven't read the article, but from your description it doesn't sound much better than default allow-all.