That’s the people who use vi to view a file. Watched a guy almost get fired when he shared his screen during an audit and had ‘sudo vi /etc/shadow’ right there in the command window. Auditor saw it and called him on it. He swore that he was only viewing the file to look for a user’s id, but the auditor didn’t care, because he could have modified it either on purpose or by accident.