They probably have a way to take over accounts to check bug reports. We've had that at places I've worked. Where you'd be able to impersonate a user in order t

They probably have a way to take over accounts to check bug reports. We've had that at places I've worked. Where you'd be able to impersonate a user in order to see what was going on with their specific set of user data to corroborate their report and find a fix. The question is... are the permissions locked down, is access audited and immutable, etc I think.