Personally, I feel that it is the lot owners fault for trusting all players with allow.
However, for this case the lot owner (DJCreeper) has quit the server (from what i'm aware of) anyways, so he left his items to whomever wished to take them, hence the /allow %.