I’m glad someone called that out. No one person being able to get a change from their laptop to production without review is a baseline requirement of a lot of certifications, because while I trust the other people on my team the security team at a client’s client have no reason to.

Self review is absolutely a thing you can get away with in the early days of a startup, and at some point will probably be necessary because you’ve only got one developer, but if you have enterprise clients just turning off review requirements is a fast track to losing those clients.