“authentication is not security,” can you elaborate on that?

Your statement doesn’t really overlap with my understanding of security, as “just access” seems critically relevant to how secure user data is, for example. Am I missing something?