Which of the following statements is/are false?

A. A database administrator (DBA) can grant and revoke any user's access to any database object.

B. Encrypting data helps protect it from unauthorized access.

C. A backup and recovery system is only necessary for very large databases.

D. SQL injection is a technique used to protect against unauthorized data access.

Choose the correct answer from the options given below: