I am letting users create accounts and set a custom authority if they wantfor configuring fields in that account later.
If they don't it defaults to the solana program authority "11111111111111111111111111111111".
Is it safe to leave it like that assuming i don't want anyone to have access to it? or is there any way for someone to get access to the account by signing with that pubkey somehow?