So a company goes to the effort of creating an audit system, but gives everyone the ability to modify the history? If your threat model is a single rogue emplo

So a company goes to the effort of creating an audit system, but gives everyone the ability to modify the history? If your threat model is a single rogue employee, auditing systems address the issues. If your threat model is "the whole company works against you", you probably shouldn't be using any company to host your infra, so host it yourself, because there's no way to be secure in that situation.