[mrmistoffelees]

Removing access to slack and email is to minimise the internal chatter

Done properly code repositories should be protected by sso and adaptive mfa at a minimum
SSH keys can be easily rotated out and if ldap is used those accounts should be managed via the upstream iam/iga

These are the two most important things to protect