The only thing it's really lacking is granular (per-field/entity) access controls, which is on their roadmap (although it's worth noting it's been on their roadmap for quite a while).