I am a little confused. In WHM, what prevents a reseller from creating an account based on the domain name of another reseller? Anything?

My experiment was like this:

Reseller "AAA" has an account tied to domain "AAA.com"
Reseller "BBB" has an account tied to domain "BBB.com"

Now reseller "BBB" decides to create an account "test.AAA.com".

It seems that "BBB" is allowed to do this, and in this case since domain "AAA.com" is in the local DNS, the zone for "test.AAA.com" gets added without problem, even though its "AAA"s domain to control.

Is this a quirk of trust in the WHM? Or do I have something perilously setup wrong? I assume the following tweak in the root WHM control panel only applies to the end user cPanel privieleges?




Hopefully this post makes sense. Any light you can shed would be appreciated. Thanks!