KDE 3.2 and Linux security

Hello! A few days ago I executed an update to KDE 3.2 on my 9.0 Linux system by using the SuSE yast-sources. Everything went very well, but when I played a little with the KDE control center, I noticed a horrible effect: Suddenly every user was able to launch YaST without the need of typing in the root password. I thought there was something I had done wrong while installing KDE, but when I called SuSE hotline, I was told not to update to KDE 3.2 because of all the security und stability risks that come with it on SuSE. Instead of updating SuSE, I was suggested to use Debian or Gentoo with KDE 3.2 instead. Does anyone here recognize these problems? Greetings, Kai Fanslau