You can do all development, testing and debugging on databases that have sensitive information removed. Just replacing names and email addresses goes a long way

You can do all development, testing and debugging on databases that have sensitive information removed. Just replacing names and email addresses goes a long way and shouldn't make a difference for the engineer. If there's a bug with a certain ride, the ID for that is enough to test. Read access to production data is only necessary in very few cases and can be heavily audited.