I definitely agree with you in spirit, but I feel like in most organizations, there's still lots of easy potential for one person to seriously subvert things.

I definitely agree with you in spirit, but I feel like in most organizations, there's still lots of easy potential for one person to seriously subvert things. I think a baseline level of trust is an absolute requirement, regardless of how well implemented your organizational access security is. I would say that any company source code, by definition, is a company secret, and there will always exist an easy means for an employee to leak or compromise that secret.