What is a common mistake with Kubernetes RBAC and security?

Granting cluster-admin broadly, using default service accounts for applications, or allowing privileged Pods weakens cluster security.