Too many security holes in NetSuite

This is unbelievable. I can't believe the lack of security applied to NetSuite when it comes to permissions and roles. Here's a couple of examples:

1. Set up a saved search to lookup customers with specific fields set (to ensure that the user can only see customers with these fields set). Restrict the saved search for 'Customers' to the user's role.

Result: Run the saved search under the specified role and only the customer's you expect show in the list. HOWEVER, in the lower right is the 'Edit View' button to allow them to edit the view. In other words, you CANNOT prevent the user from editing a saved search! You can stop them from saving it under the same name but they can edit it, remove the criteria that prevents them from seeing other customers, hit the preview button and voila, they have view and access to the list of customers you don't want them to see. SAVED SEARCHES ARE