“Hey, what happens if I put someone else’s user ID here?”