8.52A useful production incident example
Imagine a DataWeave bug produces:
External_Customer_ID__c = null
for thousands of records.
Security won't fix your data mapping.
But if integration permissions and Salesforce validation are properly constrained:
Salesforce required/external-ID rules
+
limited permissions
+
monitoring
can reduce the damage.
Security isn't just hacker prevention.
It's also limiting consequences of software defects.