> Reports usually involve instances where individuals or organizations have actively configured their installations to allow unauthorized and authenticated users to access their data over the internet.

Why is it a problem to let authenticated users to access data through the internet?