People, this is very simple. Simple don't give permissions to an agent that you wouldn't give to an adversary https://www.youtube.com/watch?v=7kWkUoR2bg0