A security researcher was able to obtain “full super administrative access” - which if accomplished by criminals - could’ve meant much worse