Comment by jpollock

A lot of the risk is insider risk. A hacked credential, an annoyed engineer going to a competitor, etc.

Think embezzlement. Think someone with a political agenda who changes the homepage on the way out the door.

Having a single point of control is asking for trouble.