There's always someone, usually many people, with abilities like this for any service that's automated enough. Even for banks, as much as they might try to sepa

There's always someone, usually many people, with abilities like this for any service that's automated enough. Even for banks, as much as they might try to separate portions and mitigate access. The solution is not making it impossible, it's making it easy to find out if it was done and being very careful who you put in those roles. That's just the nature of the world.