On Demand Recovery security features are only one part of a secure environment. Customers need to operate by their own best security practices when proceeding with data recovery. Special care needs to be given to protecting the credentials of the Azure Active Directory tenants Global Administrator accounts.