Which statement about bad actors that have access to your control plane is true?

They can't do much harm because they don't have access to customers' personally identifiable information $($PII$).$

They have complete access to employee data, but not necessarily customer data.

They can manipulate your data, change firewall rules, and modify administrative settings.

They have complete access to customer data, but not necessarily employee data.