Like, right now I have access to some 300,000 phone numbers. All I gotta do is run a shell command and then a SQL query. So can any other engineer in the company. I trust that none of us would use this access maliciously, but how many of our passwords have been leaked in various hacks? What if we're targeted for a hack? What if somebody gets fired and becomes pissy? Hell, what if someone suffers a psychiatric episode and does something stupid?
Situation has been the same at every startup I have ever worked at.
Anyone who gives their data to an early stage startup is not considering all the implications. Me included. I do it all the time. Gotta have all the shiny tools.