Comment by Matumio

Executing an action against the user's will is a security issue, even if that action is allowed according to the user's credentials.