Why is it so hard to think that maybe local security from the command-line isn't quite what it should be? That's not exactly how Apple intends for anyone to interact with the system, and it certainly seems likely that maybe it hasn't gotten quite as much of their attention as other parts of the system?