It's an excellent strategy for the reasons you mention. And a kind of "security by principle of least privilege".