Comment by wallst07

It's not a access thing, it's a security control.

For example at most good crypto companies that hold wallets it's not possible to ssh at all, even if someone asked and go permission. It just simply isn't possible short of having a AWS root key or physical access to a computer in a DC.

There is no login, no accounts, no ssh keys or similar, they are immutable containers running from images with a signed SHA. The SHA can only be built by a build system that has it's own set of strict security controls.

Without details, I don't know why a comproised laptop would make any difference unless it submitted code through a PR and had it approved by multiple people.