To stem unauthorized data exposure, Oracle recommended that database connections used by its MCP Server be defined using database users with the least privileges necessary.