Because Apex generally runs in system context, permissions, field-level security, and sharing rules aren't taken into account during code execution. This might put applications at risk of inadvertently exposing sensitive data.

Increased risk of data breaches, financial loss, and reputational harm. Eroding customer trust and confidence.