Resource-based policies granting access to all users can lead to information leakage.