One of my team member is away and needs a sitter. We assumed that one could not sit team games that one is already participating in, so we organized enough sitters to cover all games. However, when I am logged in to sit (i.e. using the login of the away member with my normal password, I can open games that I am participating in just the same as others. Ok, I have not actually tried to move a piece in those games, but you don't get the observer icon either.
Even worse, it also opened up games where I am actually the opponent, so I would be ably spy!
Shouldn't there be some kind of prevention for this kind of thing? After all, since I log in with a sitter's password, the game ought to be able to distinguish between a sitter and the original player.