The big issue here is that a single access could so easily be spun up into complete access. In a large company you have to assume that even the highest wall wil

The big issue here is that a single access could so easily be spun up into complete access. In a large company you have to assume that even the highest wall will eventually be breached. A current employee will eventually provide access to someone up to no good. Or that current employee will themselves get up to no good. Corporate messaging is a good example of this sort of thing. Completely unencrypted inside the wall. Tons of login information just left laying around in old plaintext messages. Your security should not be all or nothing...