They can still delete records, restore from backups, etc