It’s a terminal emulator and it has access to a local shell. Your scenario trusts the junior/temp with a shell.