What are the risks related to the PP042 rule related to Create and Maintain AP Payments vs Create and Maintain AP Invoices?

If the supplier approval and validation process is weak, a fictitious supplier could be introduced into the system or may already exist. Then, the clerk doing the AP invoice data entry could enter a fictitious invoice (with or without generating a fictitious hard copy of the invoice) and generate a payment for the invoice.