Banks routinely hire hit-n-run contractors to manage systems will low level, uncontrolled, unaudited access to mind boggling resources and eye popping access to private customers info.
Not just contractors. In most parts of the world there will be a 20 year old, with 3 months of "security training" paid less than $1000 a month, running around the data center with keys to the castle.
Everything has to get decrypted at some point, right? I try not to think about what would happen if a Google employee decided to leak everyone's search history.
Email porn? Child play.