A user would never have direct access to sql server tables, and recording audit logs can be done easily from code (within a transaction) whereas you'd need a separate trigger for each table being audited.
Access users will always have direct access to tables. And since user-level security is no...