I understand the security ramifications of altering tables, but why restrict create? Somebody maliciously making thousands of MySQL tables in your DB as some s

I understand the security ramifications of altering tables, but why restrict create? Somebody maliciously making thousands of MySQL tables in your DB as some sort of DoS? Some plugins create their own tables. Another safety tip, don't use 'admin' as the administrator username, and don't have any posts associated with the administrator as an author.