Hacker News Reader

Am I reading it correctly, customer's account data is exposed to the same customer? The exception is some logs as I see.

Some logs… and some other customers’ training data and code… and SAP’s internal docker image repository (with read-write access!)

You are right! I missed that all NFS folders on the screenshot have rwxr-xr-x permissions.