Being able to create a table and issue a query means being a normal user on the cluster - so you have an account and can log in. It's enough to issue `CREATE USER [blah] PASSWORD [pwd];`, which is the minimum create user command.

So we're looking at malicious or disgruntled employees, and also normal queries where users do not realize what they're doing will kill the cluster.