This is an easy thing to confirm, and I guarantee you that nobody with physical access to machines also has access to any data ON those machines, nor can anybody simply copy over some data to a usb stick and walk out with it. We have a highly complex system with very strict security protocols, and the mere act of inserting a usb into a server in production would not only fail to work, but it would set off alarm bells like you wouldn't believe.