It is wrong, there is no ifs ands or buts.
ACSclassic never had any testing so I wouldn't be surprised if there are a lot of screwed up permissions. Many of the modules were ported by people who didn't understand 4.x and therefor we have the mess that exists today.
I am not sure we should hold up the release searching for all these problems though as the ones that are found should be easily fixed.
