No required object permissions to run DocGen.
Do not require access to the contact object (or any standard SF object) to allow DocGen to run.
We have been happily using DocGen/Drawloop for over a year and never had any issues until the most recent upgrade. Now we have been forced into granting permissions that we didn't want to give to allow employees the ability to continue to use DocGen as they have always been able to. Not all templates are going to require a contact record, so why do you need to force allow access to this object across the board?