As a best practice, flows should be restricted to specific users. Omitting restrictions gives all users the possibility to invoke a flow, which is typically undesirable.

Increased risk of data breaches, financial loss, and reputational harm. Eroding customer trust and confidence.