8.51Security also means preventing accidental destructive access

Suppose integration only needs:

Account read/write
Contact read/write

It probably doesn't need:

Delete All Data
Modify All Data
Manage Users

Least privilege limits blast radius if:

bug occurs
credentials leak
developer makes mistake