&quot;But yes, the server has no control over what data is being written. This is why this type of architecture only serves for personal &#x2F; shared databases, not for public records.&quot;<p>A solution that doesn&#x27;t take into effect security from the start is pretty limited for any real world usage beyond a simple personal data app in which case why over-architect it in the first place?