Every application has one surface where a single compromised session hands over everything at once. The user table, the billing records, the CSV export, the impersonation feature somebody added in month three and never removed. That surface is the admin dashboard, and it tends to be the least-reviewed code in the whole repository, because it got scaffolded from a template in an afternoon and nobody went back to it once the feature work started.




