Once #365 lands, there's going to be a lot of broken stuff in the database. The whole core code will need to be reviewed to find and fix stuff that's completely broken and (preferably) to add security checks where they are needed. This is a tracking bug for that work.
