I see your point :-)
Well you should check whether a role called 'User' (with no permissions) is created automatically (alongside good old 'Super'), and that all users have this role assigned automatically.
If it is then you're updated. If not, replace the Authorization module in your application with the one available in the current version of the studio, and if that cannot be easily done (since you've made changes to the default module which must be kept), then add the functionality described in the previous paragraph to your authorization module (using the updated module from the palette as a reference).
For best results, use the Firefox browser..