Editors could delete any annotation, even those they do not have read access to. The editor user cannot create or read the annotations.
CWE-284