It's no different to someone hacking in and then copying over a modified executable, changing entries in the database, or attaching to a running process using g

It's no different to someone hacking in and then copying over a modified executable, changing entries in the database, or attaching to a running process using gdb to inject code. You still need proper access control.