He's talking about the Lodestone ID. That never changes. In any case, while I do agree the devs could make some adjustments to the permissions so you can set levels of Promotion permission, at the moment there's not much they can do to police the problem since it's very difficult to separate legit transactions from the thefts.