I'm wondering what controls are/were in place before that would prevent some 19-20 something year old analyst from any other corporate vendor from accessing those systems if some other POTUS wanted it to happen? Has it always been the case that someone could just come in and access these systems at the President’s whim, or just no one has done it?
I'm "assuming"? Before a contract to work on government systems is awarded, there would be proposals, requests for quotes, and diligence on the contractor to make sure they have appropriate controls and security in place. The analyst might be 19-20 something old, but would have gone through training on security protocols, handling sensitive data, etc., maybe even a background check?
Musk just rolled in with some current or former X employees and they just did what they wanted. No diligence on the company, no security protocols, nothing. You’d get push back from inside the agency, and eventually someone would go toe to toe with POTUS and put their own job on the line to stop it. Alternatively, courts could step in. Or congress.
So now here we are! A slight amendment: it’s always been the case a President, with agency lap dogs in place, a complicit congress, and corrupt courts, could hand over system access to any random 20 year old! If you have a lawless administration, then anyone could gain access. It was reported that The security chiefs that tried to stop the Musk team were immediately put on leave.
The root of our problems now is that when laws, norms and traditions were put in place, no one imagined that criminals would take over the government.