This is weird. On one side, why would you give your passcode to a device that contains a lot of stuff, usually financial apps, message history, in a lot of cases access to corporate information... and eventually nudes.
On other side, as a technician, how retarded you must be to have access to all this data and to take nudes and post them online. Like whats the end game? What sort of outcome do you expect?
This is just like the story that happened few weeks ago, when someone gained access to a popular npm packages and uploaded the most obviously visible crypto stealer.
There are a lot of stupid techs. Back in the day we had a tech of a consulting firm run l0phtcrack on our network and then brag about it to a bunch of our firm’s employees. He wasn’t even doing it to steal data, which is probably why he thought it was okay.
The thing about stupid people is they don’t know they’re stupid. They are either wholly delusional about the legality, morality, or consequences or they reason that because they couldn’t catch themselves there is no way anyone else could catch them.
Or they could buy some emerging European brands, which would have more breathing space as not everyone will want to exchange US Big Brother for Chinese Big Brother.
I was reminded how fucked the modern web is a couple years ago when I encountered a so-fast-it-felt-like-local-static-html website dashboard that could have been a "web app", but wasn't.
It was being hosted on another continent. It was written in PHP. It was rendering server-side with just some light JS on my end.
When you mention that you're used to rendering HTML on the server side and don't use React on the frontend to do things, modern web people just look at you like you committed a crime or something (VanillaJS! the horror! Those thirty lines of Javascript would be unmaintainable without a deployment tool!!!!).
It's really hard to fight the trend especially in larger orgs.
Wait until you plug it into JIRA, strap copilot and actions on it. Then you can have all flavours of hell at once. Our org has ground to a halt.
A lot of the time we just break the branch permissions on the repo we are using and run release branches without PRs and ignore the entire web interface.
I mean he's the manager who did not manage. At the end of the day, all people are humans. And if you feel like something is about to go wrong with your stability, it's a natural reaction to ask.