  void Reset() { user_interaction_received_ = false; }

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.