I just realized: this function will return insights for every instance in the installation, not just the ones the owner has access to. So if you're an admin, that's okay, but if you're just an owner with access to a subset of all the instances in an installation, this potentially reveals private information.

Instead of getAllInstanceInsightsInRange, we should create getAllOwnerInstanceInsightsInRange which selects by what instances an owner can access.