I was reading this post and my first thought was "That's true, why don't we think about the why of things and try to understand how they work? I guess we prefer the easy way out."
tonsky.me/blog/disench...

In your opinion, What would be the first security measure to consider regarding a developer's privileged access to the production environment?