The best defense is a strong CHAINSAW SWORD!!!
This one is elementary but I’m posting for reference purposes.
If you have a user that needs permission to tables and not the entire database…or if you dont want them to see anything other than what they need to, you will need to set table level permissions.
For a specific username and table use:
GRANT SELECT, UPDATE, etc… ON tableName TO “username”
Cheers