The oversight debate assumes the risk is bad actors. The risk is that the database exists at all.