A “Support” tech with limited privileges can elevate to root shell just by ssh’ing to the same box.