Least privilege

The principle does not limit the attack, it limits its radius. A compromised service with read access to one area does different damage than one with full access to the account.

It applies to humans and machines alike, and with machines it is easier to enforce, because their tasks are clearly bounded.