Indeed. To "test" the security as a linux user, I dare you to curl/wget some random sh script and run it as root.