I love when people do that because they always say "I will push the fix to git later". They never do and when we deploy a version from git things break. Good times.

I started packing things into docker containers because of that. Makes it a bit more of a hassle to change things in production.

Depends on the org, the big ones I've worked for regular Devs even seniors don't have anything like the level of access to be able to pull a stunt like that.

At the largest place I did have prod creds for everything because sometimes they are necessary and I had the seniority (sometimes you do need them in a "oh crap" scenario).

They where all setup on a second account in my work Mac which had a danger will Robinson wallpaper because I know myself, far far too easy to mentally fat finger when you have two sets of creds.