Hm, how big are accountIds? What stops me from brute forcing it and add a record?