Summary
the principal is the sole manager of everything
Vulnerability Details
This can lead to central point of failure if malicious or compromised. This conflicts the essence of web 3 decentralization aspect
Impact
the impact may be low, but if malicious or compromised, there can be drastic consequences
Tools Used
manual review
Recommendations
consider adding a deputy principal to share powers and roles. This represents the multi-sig aspects in web 3 space