Of course it will depend on exactly how sensitive etc. the information is and there are always grey areas.

But indeed, permanent access to sensitive info without ever needing approval from a second person (beyond being hired and gaining the access) seems like a bad idea.