The only real permission afforded to the Operator is definitely the authorization to update the “verifier” utilized by the agreement. In essence, the Operator could change how this agreement processes zero-understanding proofs. They may have intended to sanction these addresses on other networks in which Tornado Cash agreement code does https://porchesandyards.com/how-tornado-cash-enhances-privacy-for-ethereum-and-bnb-transactions/