Developer credentials

A developer's machine holds tokens that reach source control, registries, cloud environments and production.

That makes it one of the most valuable endpoints in the organisation, and it is typically also the one with the most software installed, the broadest internet use and the greatest resistance to restriction. The LastPass intrusion went this way. It is a real tension rather than an oversight.