cPanel prior to 58.0.4 allows a file-ownership change (to nobody) via rearrangeacct (SEC-134).
cpanel cpanel