We issue separate read-only credentials for database access fortunately. Still doesn't remove the risk of all the data been exfiltrated though.