Promehtues operator using security chart settings

Question

We saw that kube Prometheus (operator) use clustrrole and also a places where it should access secrets, is it security gap? or it restricted just to the secrets