Do you remember, I think it was 2020, when there was a big "hack" and tons of blue check accounts started posting fraud links?

Two important take-aways from that:

1) The attackers just pulled the old "Hey, I'm from IT service desk and need your password."

2) Apparently every engineer had god mode in production

I can't imagine what scary monsters are in that codebase.