This does not mean practical flaws exist in all ACL-based systems, but only that the designers of certain utilities must take responsibility to ensure that they do not introduce flaws.
What must designers of systems that are ACL based do?
take responsibility to ensure that they do not introduce flaws