I've visited data centres (with various impressing sounding accreditations) where the doors have been wedged open because the employees found the security annoying

I've also had DC employees, without authorisation: reboot my machines, give themselves access rights and then tamper with my systems

admittedly the latter was a long time ago, before any of this stuff was considered critical infrastructure

these days they'd probably end up in prison