The issue is passwordless sudo. This was discussed way back in 2016. (I don’t necessarily agree with all the reasoning.)