@nloveladyallen got it! Thank you. Although by that point I'd be more worried about leaking sensitive data. Also, if an attacker gets access to the account keys, they can send massive amounts of spam in your name and there's no way to recover from that either.