I worked as tech support for a company that provided support to several companies over various WAN links
clients included Airports / emplyment agencies etc
and we, as support had access to EVERYTHING on each client system, as we were THE support, no local / permanent employee used.

in that scenario, it WOULD be best to alter all passwords
but companies do seem to 'trust' us
maybe too much, and TBH, I have so many details n my head now, that to pull one out of th eether as it were, would take more than I could be arsed to do

but the point is well made

what if I WAS a BASTA
I COULD have crippled several networks without even breaking a sweat

maybe I should ask for a pay rise