Accounts can often gain access to sensitive/critical files by using group permissions, which are often overlooked