"Photographs are stored in a database, and the design/structure we've chosen includes some really sensitive information about the drivers," your division's boss explains. "Wouldn't it be better if we...

"Photographs are stored in a database, and the design/structure we've chosen includes some really sensitive information about the drivers," your division's boss explains. "Wouldn't it be better if we put it in a separate file and restrict access to it to those who need it?" Which strategy, if forced to take a position, would you employ? Justify your assertions.