There are so many ways to engineer something into the system that will go sideways in some nightmarish way if you are not there to prevent it.

I get that not every person has write privileges on every piece of software that is important anywhere in the company, let alone a steady enough rate of commits to sneak something into production. But that’s where you gotta get creative. Or, if you’re just going to write an explicit bomb that is hooked up to a isDLEnabledInAD() function, you gotta just not be in the country anymore when it goes off or something.