Giving SQL Server permissions was not always secure in the past… When a user needed to be able to upload objects, they actually needed the db owner role. Which isn’t actually something that you always want.
Since NAV2013 it has become possible to tighten the security a lot.