Watch this video on YouTube
What is a potential downside of granting users excessive discretionary access under DAC?