Useful feedback instead of a pointless rant/exclamation would be helpful.

Have you considered not giving the permission to edit the permissions plugin configuration to people you don't trust. it's not a security flaw if people you give permission to use the command can use the command.