What prevents them is sane compartmentalization. Even in accounting it's understood that you cannot defend again things like embezzlement if multiple employees cross different functions conspire, but you can defend against individuals by compartmentalizing their functions making every step further from their function more difficult to execute.

Same with tech. In a mature agency, if random dev has the ability to delete the repo and the back ups, you're doing it wrong. That said, your entire department is a threat you can't avoid. That is what a union brings to the table.

That makes sense. Treasury and Cash Management have been business functions forever.

The novelty of software engineering from an employee risk standpoint from my perspective was its control over product but in an insurance company, funds are the product too.

> what governance prevents workers from deleting key software products and their backups

Separation of duties, principle of least privilege, and zero trust?

Why would any worker have access to delete both the repo and its backups?