Access granted 'to be safe' accumulates into sprawling permissions that attackers inherit on compromise. Starting from zero and adding only proven needs keeps the blast radius of any single account small.
“Default to no. Earn every yes.”
Enforce Least Privilege by Default
The takeaway
Grant the minimum access needed, then expand only on demonstrated need.
Save for later
Saved only in this browser. No account needed. Does not sync. Clearing browser data removes the list.