We're getting accustomed to saying "this is wild" but, still, this is pretty wild. It's all speculative what's going on with the data while the staff is locked out, but few directions are really implausible. If access control and activity logging can get turned off, wouldn't all records be subject to updating or deleting? Or data sets simply copied off for later analysis as an enemies list?

I'd expect the civil service to be completely tainted following this admin. Any change of party will require the incoming admin to have a massive onboarding process to undo this one.