But it does highlight that any random brute could put on a mask and do this with no authorization whatsoever

I believe this a part of the plan.