> every time I access production systems, I have a ton of messages telling me that our access is being completely tracked and we are prohibited from doing anyth

> every time I access production systems, I have a ton of messages telling me that our access is being completely tracked and we are prohibited from doing anything that was mentioned in the article. I haven't actually tested to see what I can get away with because I'm not in the habit of risking my job and career over curiosities. You do know that this is literally the bare minimum level of user protection that you can legally get away with... right? That this isn't actually reassuring to anyone who has seen user data with any amount of protection? If you're satisfied with this level of protection, I assume you're satisfied with it at the NSA/GHCQ. As someone who works at an actual tech company, I can tell you without looking them up at least three layers that actually deny me access to user data. I know the team that actually audits any accesses made by those who can break glass, and I know who does the firing when the rules are broken. And the products I work on aren't even regulated like those involved in finance/health/safety/etc.