The Starcounter service account is by default set to LocalSystem. This means that any local user can run any code under the Starcounter service account. Among other things it means:
Any local user can read, write to or write from any database.
An administrator should be prudent about the account he assigns to the Starcounter service since running it under LocalSystem means that every local user can gain administrative rights.