Eh, over time I've come to believe having systems that manage insider risk is more important than expecting to be perfect in hiring.

Like, any system will fail if too many of its members don't care about maintaining it, but you're going to hire the wrong person from time to time.

It's important to design your systems to minimize access, both in terms of not allowing everyone access to everything and to only allow people as much access as then need to do their jobs, to require multiple people to sign off on temporary access grants, to create audit trails and to actually audit them and have consequences for violating the rules.

(Which, in this case, DOGE purposefully dismantled.)

It doesn't just protect the data from nefarious villains, it also protects young idiots from themselves, who don't realize you can cause harm just by being curious.