Comment 2 for bug 1175193

Thierry, I would say that there's not a very large risk here. Pause/unpause, start/stop, and change password are fairly cheap actions that could be used, but as you pointed out the db isn't going to just balloon quickly.

Looking at other models in the database they seem to be bounded in some way, typically by quotas or physical resources, while instance_actions and events are not. So, though a small risk, it's still a risk.