Losing access is disruptive but far less of an issue than a malicious actor getting access.