“You need to make sure when there's an application that is being used by an organization, by the organization, to make sure that the underlying connections are not somebody's personal connections.”

Transcript evidence from Michael Bargury -- Low Code / No Code Security and an OWASP Top Ten.