They do, tho. It's just we usually see events through the lens of characters that have admin access. Or are badass enough to hack them when they don't. Or both, like that episode where Data goes rogue and sets the longest lockout password ever.