Unified login is for convenience, not security. From what I understand you could take a personal machine (outside a company domain), connect to a network, map a drive using alternate credentials... and because you can log into the personal machine with any local Windows account outside the domain, by running Sage workstation on that machine, in essence you could impersonate any unified login ID.