It's always hard to estimate what the average case is for something like this. But I would guess that the average programmer do have access to "production data"

It's always hard to estimate what the average case is for something like this. But I would guess that the average programmer do have access to "production data". What that contain is obviously industry specific, and the most sensitive industries are (hopefully) well regulated and not average, like health care or finance. But I would guess that programmers at Tinder/Grindr/$datingSite had access to production data in the early days. Probably many SaaS things, perhaps doing stuff in the HR/recruitment/time reporting area. For B2B I'm guessing many programmers have access to business sensitive data, that competitors would like to get their hands on. At the least I would guess that at least the average backend developer have access to all contact info / emails for all users in services they work on. Obviously all best practices say that random Joe programmer shouldn't have access to these things, but I don't think that match the _average_ reality.