macOS High Sierra flaw allows user to authenticate as root while leaving password field blank, which grants privileged access to system preferences [theregister.co.uk]
Thank goodness I stayed on Sierra. This is awful.