Every Windows device has a built-in local administrator account, which has full permissions and cannot be deleted - a lot of power against one single account.