My first access to a unix machine was around 19 years ago, and I’m still amazined that sudo tcsh is a valid command on most systems.
I’m not saying that it isn’t convenient, mind you, but the fact that I can then execute emacs is also hilarious. Especially because sudo emacs is prohibited.
here is your system log, let me save you the trouble of auditing it by running a shell.
(I’m aware, incidentally, that it’s basically impossible to stop people from running a shell as long as they can run any naive-turing-complete interpreter or compiler. Maybe it’s time to only fight battles you can win.)