'Could allow a local user to gain root'

I guess the answer is that in most applications you are able to keep most users off the box altogether.