The only real "protection" against rogue admins is to have multiple admins who can monitor each other and (if required by audit) sign off on each other's work. Most organizations of any significant size have more than one person at the top, so that (at the very least) if any one admin is sick or leaves in a huff, one or more of the other's can take his place and/or revoke what permissions that admin had. This can take some forethought to prepare.
Without seeing the survey I can't confirm this, but I would suspect that they are only counting Internet connections to the home or office.
The number is much larger when you consider the number of people in developing and 3rd world nations who access the Internet in public venues, like cafes and libraries. But getting a good count here would be very complex.
This was a story I tried to submit but was rejected by Slashdot's editorial staff. Not grousing, saving my composition here for posterity, as I do with other of my rejected stories.
cancan writes: "The NY times is carrying an article about how the RIAA is hiring hip hop artists to make mix tapes, and then
helping the police raid their studios. In the case of DJ Drama and DJ Don Cannon (myspace warning), they were raided by SWAT teams with their guns drawn. The local police chief said later that they were "prepared for the worst." Men in RIAA jackets helped cart away "evidence"."