I once had pen testers report that the data to our application could be compromised if hackers managed to get write access to the server it was on. I said if they had that access, compromised data was the least of our worries.