So if a hacker infiltrated your system and silently fed plausable but wrong data into your databases for 10 days, your whole system would be screwed?

You need something that's not online or at least not with credentials and devices the Devs and operations people use.

The worst case is the company itself denying you access. More likely to happen with Google.