zlacker

They can get every user except root (assuming that root squash is in place).

NFSv3 and below trusts any uid/gids presented by the client unless they are squashed.