I think so. Many sites have some sort of sensitive user data that could be exploited. If you work in ecommerce, you likely have access to the payment gateway as well.