There have yet to be any incidents of access controls being circumvented. 
Without adequate awareness about the risks involved in disclosing sensitive information, users may volunteer information which can allow an intruder to circumvent otherwise well-designed access controls.