Yeah that is not even remotely good enough. Processes running under the authority of individual engineers cannot have access to user data. Processes with access

Yeah that is not even remotely good enough. Processes running under the authority of individual engineers cannot have access to user data. Processes with access to user data can only run reviewed and committed code with verified production builds. There can't be user data just laying around on hosts were unix superuser permissions can be used to access it.