Which two security issues are associated with this approach?

Universal Containers would like to use a hard-coded username/password/security token of a user with a System Administrator profile to integrate its back-end system to Salesforce for inbound API calls.

Which two security issues are associated with this approach?
A . All back-end systems get uncontrolled access to any data within the Salesforce environment.
B . Unintended password resets will cause the integration to stop working and disrupt business processes.
C . Apex web services can executive with system privileges with such Salesforce credentials.
D . Unsecure storage of the credentials may result in hackers gaining unauthorized access to Salesforce.

Answer: A,D