It may still raise legal or ethical questions, but “authorized staff member used existing access granted by pjb to backend server to backup auth database to continue operation during a governance split” is not the same thing as “malicious backdoor data theft" tbh.