When to use an authenticated/credentialed vulnerability scan

I'm not clear on why there is a push to use authenticated scans right off the bat. Generally, an authenticated scan uses a privileged account, so my thought is that I would have bigger problems than vulnerabilities if an attacker has credentials for a privileged account. So why not first focus on vulnerabilities that do not require a privileged account to exploit, especially when an InfoSec program is immature and there are thousands of vulnerabilities?

I do understand that compliance …

account attacker bat clear credentials cybersecurity focus privileged problems scan scans thought vulnerabilities vulnerability vulnerability scan