There were some good questions raised in this Zulip thread:
https://debezium.zulipchat.com/#narrow/stream/302529-users/topic/Restrict.20debezium.20connector.20user.20in.20multitenant.20Oracle/near/325158774

We should consider adding these to the Oracle documentation FAQ as they could be ones that users who want to have more restrictive user use cases could be interested in knowing the answers for.