As I understand, Endpoint Protection.cloud has a potential security lapse. If anyone is able to access the redistributable installer or access the password of cloud, he can play havoc with the whole lot of installations. As such he can add new clients or delete existing clients. This should be protected by two step authentication through a link which can be sent to email id or some other means.
I think this is a serious issue.
Ajay Goyal