Should this query include a permission check? (e.g. libraries_content_readable(current_organization)