The reasoning behind preventing theme developers from theming the admin areas was because if you don't know what you are doing then you can mess things up to such an extent that you are unable to use confluence.

By decorating the sudo login pages using the global decorator it exposes the user to the possibility that they can lock themselves out of confluence - for this reason I believe the sudo should be decorated either using it's own decorator, or through the admin decorator.