The clever thing is having saved query results and a way to re-run the query. Besides that it's just a nice executable SQL pastebin with a good user auth strategy (integration into an existing system).
If you can make a dataclip, you have access to the database. We've audited it for privilege escalation and put some simple shooting-yourself-in-the-foot protection in, but if you REALLY REALLY want to screw yourself over you can probably find a way.
I am guessing it is for your company intranet? If you are powering it with nginx, you can tack the postgres add-on (https://github.com/FRiCKLE/ngx_postgres/) and go from there.