That's true in many cases, but if the network is solely for database access and the only servers with access to it would be configured with DB credentials anywa

That's true in many cases, but if the network is solely for database access and the only servers with access to it would be configured with DB credentials anyway, then the path to compromise is equivalent (get into a server with db credentials/network access).