If you can access your own record without authentication shouldn't that be good enough proof? Why do you need to access everyone else's information illegally t

If you can access your own record without authentication shouldn't that be good enough proof? Why do you need to access everyone else's information illegally to prove that your own is available without proper controls in place?