I've noticed on hidden (loli/shota) posts, that I'm still able to edit the content rating, parent post number, prev/next post numbers and source field. I'm also able to vote, flag for deletion, add notes, add to a pool, or add to favorites.
Shouldn't all these options be hidden from non-privileged users? Certainly leaving them exposed creates an invitation for abuse. The only potentially available option to non-prived users should be "Delete," if the user happens to be the creator of a particular post.
Updated by robicho