@ramin_hal9001@emacs.ch

So it must be read as:

"Note that the `anon` (Linux) user is able to become `root` (Linux user) without password by default, as a development convenience.

To prevent this, remove `anon` (Linux user) from the `wheel` (Linux) group and they (who!? ah the real-life users logged as the `anon` Linux user) will no longer be able to run `/bin/su`."

I'm not convinced. It is against Occam's Razor. It is simpler to read as "... and it (the `anon` Linux user) will no longer be able to run `/bin/su`".

But it is not really important. Only for sake of discussion.
@louis@emacs.ch