Unfortunately, that's a losing battle.
I have elevated accounts in my environment. If any of my accounts access data they don't usually access or modify data they don't usually modify or modify too much data in a short period of time, things get locked down fast.
Maybe they were already protected in that regard and something still went wrong.