That solves the problem of knowing when an existing record has been modified. But what if someone comes in and deletes the whole record? Or a whole LOT of records (either in error or by intentional mischief)? Then there's no fingerprint to follow up with anyone about who or when it was done. No way to tell that it was done at all, and you might not ever know that your database was corrupted or accessed by anyone (and what they might have done).
