I imagine at Facebook's scale that nobody has direct access to individual database or application instances; and that if someone actually needed to run queries

I imagine at Facebook's scale that nobody has direct access to individual database or application instances; and that if someone actually needed to run queries of any kind in production, it'd be as stringent as deploying a code change.