Correct ownership structure of module account control of accounts

[czarcas7ic]

Background

See this PR #7768

And specifically this comment #7768 (comment)

I believe Dev is suggesting that the gov module account should not be able to control any account, and should instead be assigned accounts that it controls.

If this is what was meant, I don't think I agree, as I don't see the security risk here. But I could be misunderstanding / not seeing the entire picture.

[czarcas7ic]

Requesting further explanation of expected design from @ValarDragon